Application Security Engineer

Bugcrowd

. Curate and manage incoming security vulnerability submissions for Bugcrowd-managed bug bounty programs .

Posted 9/21/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security vulnerability assessment, including knowledge of OWASP Top Ten vulnerabilities and proficiency with tools like Burp Suite and nmap. Capable of managing bug bounty submissions and communicating effectively with clients and researchers.

Highest-signal resume keywords

Security Vulnerability AssessmentOWASP Top Ten KnowledgeBurp Suite ProficiencyIncident Response ManagementScripting or Development Language

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ConsultingVulnerability TriageSubmission ValidationIncident ResponseScripting Language

Soft Skills

Strong OrganizationInfluencing SkillsCommunication Skills

Tools & Technologies

Burp SuiteNmapSqlmapKali Linux

Industry Keywords

Bug Bounty ProgramsSecurity Assessment ResearchConfidential Information Management

Tech Stack

Tools & technologies

Linux

About the role

Key responsibilities & impact

Curate and manage incoming security vulnerability submissions for Bugcrowd-managed bug bounty programs
Triage and validate submissions for validity, accuracy, and severity
Communicate directly with Bugcrowd clients or researchers when additional information is required
Handle incident response by escalating and communicating about the highest-severity bugs to clients
Apply OWASP Top Ten vulnerability knowledge to security assessment operations
Assist with the design or development of tooling to improve the triage and validation process
Work under the direction of the Director of Technical Operations

Requirements

What you’ll need

Bachelor’s degree or previous security consulting experience
Published and demonstrated passion for security assessment research
High proficiency with Burp Suite or another interception proxy
Working-level experience with industry-standard tools such as nmap, sqlmap, and tools included in Kali Linux
Strong knowledge of OWASP Top Ten vulnerabilities
Strong skill set in one scripting or development language
Ability to execute individual projects while contributing to the team
Ability to complete tasks on time
Strong organization, influencing, and communication skills
Ability to complete the physical requirements of the job with or without reasonable accommodation
Must be able to remain in a stationary position 50% of the time
Must be able to carry or move a laptop as needed throughout the workday
Requisite integrity to maintain highly confidential and sensitive information in strict confidence
Subject to background checks for employment purposes

Benefits

Comp & perks

Exposure to security programs for hundreds of companies
Exposure to elite security researchers and cutting-edge security testing methodologies
Learning opportunities across diverse security programs and vulnerability types
Exposure to security programs involving cars, IoT devices, embedded systems, mobile applications, and more
Remote, work-from-home 100% of the time
Reasonable accommodations for qualified individuals with disabilities
Equal employment opportunity and inclusive workplace commitment