Application Security Engineer II – Contract ( 6 months ) at Bugcrowd

Job Description

We are Bugcrowd. Since 2012, we’ve been empowering organizations to take again management and keep forward of menace actors by uniting the collective ingenuity and experience of our prospects and trusted alliance of elite hackers, with our patented knowledge and AI-powered Security Knowledge Platform™. Our community of hackers brings numerous experience to uncover hidden weaknesses, adapting swiftly to evolving threats, even towards zero-day exploits. With unmatched scalability and adaptableness, our knowledge and AI-driven CrowdMatch™ know-how in our platform finds the proper expertise in your distinctive combat. We purpose to create a brand new period of recent crowdsourced safety that outpaces menace actors. Unleash the ingenuity of the hacker neighborhood with Bugcrowd, go to www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.

Job Summary

At Bugcrowd, we deal with utility safety evaluation at an epic scale. As an Application Security Engineer (ASE) you’ll curate and handle the incoming safety vulnerability submissions to a number of the global community’s greatest firms’ bug bounty applications. Here are only a few of the the reason why we’re one of the best:

• A tenure at Bugcrowd typically means you’ve gotten labored on not just one firm’s safety program however probably on a whole lot.
• As an ASE at Bugcrowd you can be uncovered to the Internet’s finest safety researchers and their cutting-edge safety testing methodologies. Our ASEs shortly grow to be technically fluent in obscure/complicated XSS, SQLi, XXE, IDOR, SSTI, SSRF, and lots of different vulnerability sorts. There isn’t any different group that gives the training alternative that Bugcrowd does.
• You will likely be uncovered to issues outdoors of your consolation zone. We routinely run safety applications for vehicles, IoT units, embedded methods, cellular functions, and extra!
• We have an superior workforce and tons of perks. We’ve even been chosen as one in all “The 10 Coolest Security Startups Of 2016” by crn.com.

Essential Duties & Responsibilities

An ASE is liable for the continued triage and validation companies of Bugcrowd managed applications. Under the path of the Director of Technical Operations, you’ll take incoming submission knowledge and curate it for validity, accuracy, and severity in addition to talk instantly with Bugcrowd’s shoppers or researchers when further data is required. ASEs additionally deal with Incident Response – escalating and speaking in regards to the highest severity bugs to shoppers. ASEs have to have sturdy information of OWASP Top Ten kind vulnerabilities. They additionally normally require a powerful ability set in a single scripting/improvement language, typically to help with the design or improvement of tooling for bettering the triage/validation course of.  The ASE place is ideal for safety professionals trying to take their abilities to the subsequent degree.

Education, Experience, Skills, & Abilities

• Bachelor’s diploma or earlier safety consulting expertise
• Published and demonstrated ardour for safety evaluation analysis
• High proficiency with Burp Suite (or some other interception proxy) and a working degree of expertise with different business commonplace instruments (nmap, sqlmap, something included in Kali Linux)
• Ability to execute on particular person initiatives however nonetheless contribute to the workforce
• Ability to finish duties on time
• Strong group, influencing, and communication abilities

Working Conditions

The supreme candidate should be capable of full all bodily necessities of the job with or with out cheap lodging.

Sitting and/or standing – Must be capable of stay in a stationary place 50% of the time

Carrying and /or lifting – Must be capable of carry / transfer laptop computer as wanted all through the work day.

Environment – distant, work-from-home 100% of the time.

ADA Statement

Bugcrowd is dedicated to the complete inclusion of all certified people. In protecting with our dedication, Bugcrowd will take the steps to guarantee that folks with disabilities are supplied cheap lodging. Accordingly, if cheap lodging is required to completely take part within the job utility or interview course of, to carry out the important capabilities of the place, and/or to obtain all different advantages and privileges of employment, please contact HR at [email protected].

Culture

• At Bugcrowd, we perceive that variety within the office is important to an organization’s success and progress. We try to guarantee that persons are included and have a way of being a part of making Bugcrowd not solely an excellent product however an excellent place to work.
• We commonly hear from each prospects and researchers that Bugcrowd seems like a household, and we try to keep up that internally as nicely.
• Our workforce consists of a broad vary of individuals: musicians, journey sports activities junkies, nature lovers, dad and mom, cereal lovers, evening owls, cyclists, artists—you get the purpose.

At Bugcrowd, we’re fixing safety threats and vulnerabilities which are related to everybody, due to this fact we consider fixing these issues takes every kind of backgrounds. We worth the views and experiences folks from underrepresented backgrounds deliver.

Disclaimer

This place has entry to extremely confidential, delicate data regarding the applied sciences of Bugcrowd. It is crucial that the applicant possess the requisite integrity to keep up the data within the strictest confidence.

The firm is permitted to acquire background checks for employment functions underneath state and federal regulation. Background checks will likely be carried out for positions that contain entry to confidential or proprietary data (together with commerce secrets and techniques).

Background checks might embrace Social Security verification, prior employment verification, private {and professional} references, instructional verification, and felony historical past. Applicants with conviction histories is not going to be excluded from consideration to the extent required bylaw.

Any private knowledge you submit in connection along with your utility will likely be processed in compliance with Bugcrowd’s Privacy Policy, which you’ll evaluate right here: https://www.bugcrowd.com/privacy.

Equal Employment Opportunity:

Bugcrowd is EOE, Disability/Age Employer.

Individuals looking for employment at Bugcrowd are thought-about with out regards to race, shade, faith, nationwide origin, age, intercourse, marital standing, ancestry, bodily or psychological incapacity, veteran standing, gender identification, or sexual orientation.

Bugcrowd is dedicated to the complete inclusion of all certified people. In protecting with our dedication, Bugcrowd will take the steps to guarantee that folks with disabilities are supplied cheap lodging. Accordingly, if cheap lodging is required to completely take part within the job utility or interview course of, to carry out the important capabilities of the place, and/or to obtain all different advantages and privileges of employment, please contact HR at ADA at bugcrowd.com.

Apply at: https://www.bugcrowd.com/about/careers/