Security Engineer, Bugcrowd

$87-106k

This position may also be eligible to participate in a discretionary bonus program or commission plan

AWS

JavaScript

Python

Bash

Ruby

Kotlin

JIRA

Git

Rails

Ruby on Rails

Golang

Mid and Senior level

Remote from US

Crowdsourced security platform

Job no longer available

Crowdsourced security platform

1001+ employees

B2BEnterpriseSaaSCyber SecurityCloud Computing

Job no longer available

$87-106k

This position may also be eligible to participate in a discretionary bonus program or commission plan

AWS

JavaScript

Python

Bash

Ruby

Kotlin

JIRA

Git

Rails

Ruby on Rails

Golang

Mid and Senior level

Remote from US

1001+ employees

B2BEnterpriseSaaSCyber SecurityCloud Computing

Company mission

To meet you where you are in your security journey, enabling you to proactively keep your digital business one step ahead of cyberthreats.

Job

Company

Role

Who you are

The Security Engineer will have 3 - 5+ years of experience in a similar role or its equivalent
Experience with writing IR plans and operating within an IR practice (experience responding to incidents)
Working knowledge of Threat Intelligence and how it can be used to proactively create security controls (automation)
Familiarity with Pentesting techniques and OWASP Top 10
Ability to understand a vulnerability and work with developers to patch it
Scripting knowledge in at least one of: Bash, Python, JavaScript, Ruby
Self motivated and organized - must be able to operate from a calendar and be punctual
Cloud security experience or holds cloud certifications (AWS strongly preferred)
Experience with Identity and Access Management (IAM) controls
Ability to work autonomously within a global company, and critically think without intervention
Familiarity with git
Familiarity with a ticketing system / issue tracking system is a must (e.g: Jira)

What the job involves

The Security Engineer’s role is to aid the security efforts of Bugcrowd, while proactively making changes to further improve our security posture
You will be challenged on a regular basis, especially because you are the last line of defense for one of the largest crowdsourced security platforms!
The Security Engineer will provide mentoring to multiple junior security engineers and will work closely with other team members on a daily basis
Aiding within the Incident Response process
Threat hunting
Developing patches and security controls within a Ruby on Rails application, Golang application, and Kotlin application
Communicating across multiple teams converting technical knowledge into palatable words for multiple audiences
Significant familiarity with AWS and network security controls
Identifying vulnerability root causes
Performing basic risk assessments and triaging
Educating developers on security best practices
Architecting solutions with developers to remediate any security concerns
Performing basic red team assessments (including but not limited to phishing, vishing, spoofing technologies, etc.)
Testing new features within the platform and services
Automating security tasks to increase workflow efficiency
Mentoring other team members

Our take

Remote working has become a more permanent trend, resulting in new forms of cyberattack. Yet, most companies lack the resources and diversified skills to find hidden vulnerabilities before attackers do. Bugcrowd is setting out to fix this problem by connecting companies with “white hat hackers” who proactively search for vulnerabilities in a company’s system.

As the leading provider of crowdsourced cybersecurity solutions, the company’s ethical hackers prevented more than $27 billion in cybercrime between May 2020 - August 2021. The company has a number of high-profile customers, including Etsy, Tesla, Cisco, Pinterest and Twilio.

Bugcrowd has kept up this impressive momentum, raising considerable amounts of funding over the years. Its 2024 influx will empower the company to scale its platform, fuel innovation, and leverage strategic M&A opportunities.

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

11% employee growth in 12 months

Glassdoor (3.9)

Company

Funding (last 2 of 8 rounds)

Nov 2024

$50m

LATE VC

Feb 2024

$102m

SERIES E

Total funding: $230.7m

Company benefits

Medical/Dental/Vision Insurance
401(k)
Stock Options
Flexible Vacation Time
Mental Health Days
Pre-tax Commuter Benefits

Company HQ

Financial District, San Francisco, CA

Leadership

Casey Ellis

(Founder)

Former CEO of Bugcrowd. Founder & previous Director of White Label Security. Current member of the CTI League, is on the Advisory Board at Flirtey, a Mentor at CyRise, and Principal at Tall Poppy Group.

Dave Gerry

(CEO)

Has been with the company since 2020, as an Advisor then COO before becoming CEO in 2022. They are also a Member of the Forbes Business Development Council and former CRO of NTT Application Security.

Share this job

View 11 more jobs at Bugcrowd