Security Engineer, Bugcrowd
$97-106k
More information about location
Crowdsourced security platform
Open for applications
Crowdsourced security platform
1001+ employees
Open for applications
$97-106k
More information about location
1001+ employees
Company mission
To meet you where you are in your security journey, enabling you to proactively keep your digital business one step ahead of cyberthreats.
Role
Who you are
- Bachelor's Degree in a relevant field or commensurate experience
- 3 - 5+ years of professional experience in a similar role or its equivalent
- Experience with writing IR plans and operating within an IR practice (experience responding to incidents)
- Working knowledge of Threat Intelligence and how it can be used to proactively create security controls (automation)
- Familiarity with Pentesting techniques and OWASP Top 10
- Ability to understand a vulnerability and work with developers to patch it
- Scripting knowledge in at least one of: Bash, Python, JavaScript, Ruby
- Self motivated and organized - must be able to operate from a calendar and be punctual
- Cloud security experience or holds cloud certifications (AWS strongly preferred)
- Experience with Identity and Access Management (IAM) controls
- Ability to work autonomously within a global company, and critically think without intervention
- Familiarity with git
- Familiarity with a ticketing system / issue tracking system is a must (e.g: Jira)
- Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
- Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day
- Environment - remote, work-from-home 100% of the time
What the job involves
- The Security Engineer’s role is to aid the security efforts of Bugcrowd, while proactively making changes to further improve our security posture
- To achieve this goal, we require a motivated team member who is willing to push their own boundaries and step out of their comfort zone
- You will be challenged on a regular basis, especially because you are the last line of defense for one of the largest crowdsourced security platforms!
- The Security Engineer will provide mentoring to multiple junior security engineers and will work closely with other team members on a daily basis
- Aiding within the Incident Response process
- Threat hunting
- Developing patches and security controls within a Ruby on Rails application, Golang application, and Kotlin application
- Communicating across multiple teams converting technical knowledge into palatable words for multiple audiences
- Significant familiarity with AWS and network security controls
- Identifying vulnerability root causes
- Performing basic risk assessments and triaging
- Educating developers on security best practices
- Architecting solutions with developers to remediate any security concerns
- Performing basic red team assessments (including but not limited to phishing, vishing, spoofing technologies, etc.)
- Testing new features within the platform and services
- Automating security tasks to increase workflow efficiency
- Mentoring other team members
Our take
Remote working has become a more permanent trend, resulting in new forms of cyberattack. Yet, most companies lack the resources and diversified skills to find hidden vulnerabilities before attackers do. Bugcrowd is setting out to fix this problem by connecting companies with “white hat hackers” who proactively search for vulnerabilities in a company’s system.
As the leading provider of crowdsourced cybersecurity solutions, the company’s ethical hackers prevented more than $27 billion in cybercrime between May 2020 - August 2021. The company has a number of high-profile customers, including Etsy, Tesla, Cisco, Pinterest and Twilio.
Bugcrowd has kept up this impressive momentum, raising considerable amounts of funding over the years. The latest influx will empower the company to further scale its platform, fuel innovation and leverage strategic M&A opportunities in the future.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Nov 2024
$50m
LATE VC
Feb 2024
$102m
SERIES E
Total funding: $230.7m
Company benefits
- Medical/Dental/Vision Insurance
- 401(k)
- Stock Options
- Flexible Vacation Time
- Mental Health Days
- Pre-tax Commuter Benefits
Company values
- 360 Degree Accountability: Every team member counts. We each take responsibility for our tasks, but we're always ready to pitch in
- Build It Like You Own It: Value isn't just measured in time - it's about making meaningful change. No matter what we’re working on, we take ownership of—and pride in—our projects
- Think Like a Hacker: If it ain’t broke…well, we still take it apart and make it even better! We never settle for “good enough,” and use whatever resources we have to achieve customer goals
- Simple is Strong: We approach every project with the goal of finding the simplest, strongest solution possible. Doing so helps us deliver more resilient, robust and efficient results
- Respect is Key: Everyone deserves to be treated with respect. Whether we’re working with a customer, an ethical hacker or a team member, we always communicate with compassion and respect
- Don't Just be Valuable; Create Value: It’s not enough for us to simply “be valuable.” Instead, we proactively create value for our stakeholders by solving their most urgent challenges in innovative, impactful ways
- Happy Customers: Delighting our customers really matters to us. We always focus on delivering the best possible experience, throughout the platform and in every day-to-day interaction
Company HQ
Northern Waterfront, San Francisco, CA
Articles
Leadership
Casey Ellis
(Founder & Advisor)Former CEO of Bugcrowd. Founder & previous Director of White Label Security. Current member of the CTI League, is on the Advisory Board at Flirtey, a Mentor at CyRise, and Principal at Tall Poppy Group.
Dave Gerry
(CEO)Has been with the company since 2020, as an Advisor then COO before becoming CEO in 2022. They are also a Member of the Forbes Business Development Council and former CRO of NTT Application Security.
Share this job
View 7 more jobs at Bugcrowd