Application Security Engineer II (6‑month contract)

About the role

Bugcrowd is looking for an Application Security Engineer II to join its Security Operations team on a six‑month contract. You will work remotely from India, triaging and validating vulnerability submissions for some of the world’s largest bug bounty programs.

Key responsibilities

• Review incoming security vulnerability reports, assess validity, accuracy and severity.
• Communicate with clients and security researchers to gather additional information when needed.
• Escalate high‑severity findings and support incident response for client programs.
• Develop or enhance tooling using a scripting language to improve triage and validation processes.

Required profile

• Bachelor’s degree or equivalent security consulting experience.
• Demonstrated passion for security assessment research, with published findings preferred.
• Ability to work independently on projects while contributing to a collaborative team.
• Strong organization, influencing and communication skills.

Required skills

• Proficiency with Burp Suite or another interception proxy.
• Experience using nmap, sqlmap and other tools included in Kali Linux.
• Solid understanding of OWASP Top Ten vulnerabilities.
• Competence in at least one scripting or development language for tool creation.