Application Security Engineer

2 meses atrás

Rio de Janeiro, Brasil Bugcrowd Tempo inteiro

We are Bugcrowd. Since 2012, we've been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit

Job Summary

At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world's biggest companies' bug bounty programs. Here are just a few of the reasons why we are the best:

  • A tenure at Bugcrowd often means you have worked on not only one company's security program but potentially on hundreds.
  • As an ASE at Bugcrowd you will be exposed to the Internet's best security researchers and their cutting-edge security testing methodologies. Our ASEs quickly become technically fluent in obscure/complex XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many other vulnerability types.
  • You will be exposed to things outside of your comfort zone. We routinely run security programs for cars, IoT devices, embedded systems, mobile applications, and more
  • We have an awesome team and tons of perks. We've even been selected as one of "The 10 Coolest Security Startups Of 2016" by crn.com.

**Please note we are only considering candidates residing in Brazil

Essential Duties & Responsibilities

An ASE is responsible for the ongoing triage and validation services of Bugcrowd managed programs. Under the direction of the Director of Technical Operations, you will take incoming submission data and curate it for validity, accuracy, and severity as well as communicate directly with Bugcrowd's clients or researchers when additional information is required. ASEs also handle Incident Response – escalating and communicating about the highest severity bugs to clients. ASEs need to have strong knowledge of OWASP Top Ten type vulnerabilities and usually require a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process. The ASE position is perfect for security professionals looking to take their skills to the next level.

Education, Experience, Skills, & Abilities

  • Bachelor's degree or previous security consulting experience
  • Published and demonstrated passion for security assessment research
  • High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
  • Ability to execute on individual projects but still contribute to the team
  • Ability to complete tasks on time
  • Strong organization, influencing, and communication skills

Working Conditions

The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.

  • Sitting and/or standing - Must be able to remain in a stationary position 50% of the time
  • Carrying and/or lifting - Must be able to carry/move laptop as needed throughout the workday.
  • Environment - remote, work-from-home 100% of the time.

Culture

  • At Bugcrowd, we understand that diversity in the workplace is vital to a company's success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
  • We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
  • Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.

At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.

Disclaimer

This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.

The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).

Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.

Equal Employment Opportunity:

Bugcrowd is EOE, Disability/Age Employer.

Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.

Apply at:

#J-18808-Ljbffr

  • Cyber Security Test Engineer

    Há 1 mês

    Rio de Janeiro, Rio de Janeiro, Brasil Tenchi Security Tempo inteiro

    At Tenchi Security, we're building innovative technology to manage Third-Party Cyber Risk for businesses. Our team is spread across the globe, and we're looking for a skilled Test Engineer to join us.As a Test Engineer, you'll be responsible for developing and maintaining automated and manual tests, creating high release standards, and participating in...

  • Application Security Engineer

    Há 1 mês

    Rio De Janeiro, Brasil Bugcrowd Tempo inteiro

    We are Bugcrowd. Since 2012, we've been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform. Our network of hackers brings diverse expertise to uncover hidden...

  • Security Operations Engineer

    2 meses atrás

    Região Geográfica Intermediária de Cruzeiro do Sul, Brasil Dijital Team Pty Ltd Tempo inteiro

    Dijital Team Pty Ltd Build your offshore IT A-Team in Sri Lanka with Dijital Team. Increase efficiency, reduce costs & achieve more for your business. Start building your team.Dijital Team designs and builds high performing IT teams, and we want you to join our team! The primary role of the Cyber Security Operations Engineer is to deliver exceptional...

  • Product Security Engineer III

    Há 1 mês

    Região Geográfica Intermediária de Manaus, Brasil Mindbody Tempo inteiro

    About MindbodyMindbody is a leading technology platform that empowers the fitness and wellness industry. We're revolutionizing the way businesses connect with consumers, and we're looking for talented individuals to join our team.Job SummaryWe're seeking a highly skilled Product Security Engineer III to contribute to the success of our Product Security team....

  • Security Vulnerability Specialist

    2 semanas atrás

    Rio de Janeiro, Rio de Janeiro, Brasil Bugcrowd Tempo inteiro

    Job OverviewWe are Bugcrowd, a leading provider of crowdsourced security solutions. Our mission is to unite collective ingenuity and expertise of customers and elite hackers for modern security.About the RoleThis position requires an experienced Application Security Engineer (ASE) to curate and manage security vulnerability submissions to big companies' bug...

  • Software Developer

    3 semanas atrás

    Rio de Janeiro, Rio de Janeiro, Brasil Princesa Supermercados Tempo inteiro

    About the Role:We are looking for a talented Software Developer to join our team as an Application Engineer.Prior experience with Java and Spring Boot is a plus, but we are open to training the right candidate.Key Responsibilities:- Design and develop scalable and efficient software solutions- Collaborate with cross-functional teams to identify and...

  • Product Security Engineer

    3 semanas atrás

    Região Geográfica Intermediária de Manaus, Brasil Mindbody Tempo inteiro

    MindbodyExplore the fitness, wellness, and beauty experiences that move you and see why businesses rely on Mindbody software to grow their brands. We're revolutionizing the fitness & wellness industry, and we’re looking for talented people to help us do it. Mindbody + ClassPass bring together the best of both sides of the market: Mindbody is the...

  • Is Application Engineer

    4 semanas atrás

    Rio De Janeiro, Brasil Baker Hughes Tempo inteiro

    Would you like to be part of our Integrated Services team?Join usOur Integrated Services (IS) team works onsite with our customers to support the on-site installation, maintenance and planning of our industry-leading products. Partner with the bestThe Applications Engineer ensures Baker Hughes can deliver flawless execution through involvement in...

  • Product Security Engineer III

    2 meses atrás

    Região Geográfica Intermediária de Manaus, Brasil Mindbody Tempo inteiro

    We're revolutionizing the fitness & wellness industry, and we’re looking for talented people to help us do it. Mindbody + ClassPass bring together the best of both sides of the market: Mindbody is the industry’s most trusted all-in-one technology platform; ClassPass is one of the most popular apps for fitness & self-care enthusiasts. Together we’re...

  • Senior Software Engineer for Web Application Solutions

    Há 4 dias

    Rio de Janeiro, Rio de Janeiro, Brasil Halliburton Energy Services Tempo inteiro

    We are seeking a highly skilled Senior Software Engineer to join our team in developing and maintaining web application solutions. With a strong background in Angular, TypeScript, and .NET 6.0, you will play a pivotal role in designing, developing, and testing software solutions that meet product requirements.About the RoleAs a Senior Software Engineer, you...

  • It Security Engineer

    4 semanas atrás

    Região Geográfica Intermediária de Manaus, Brasil SICPA Tempo inteiro

    SICPASICPA is a long-trusted partner to governments, central banks, high security printers and the industry: a market leader in security inks for banknotes. We are looking for a highly motivated, outstanding Software Security Engineer to join our small but very dynamic team. SOFTWARE SECURITY ENGINEER ROLE: Collaborate with cross-functional teams to...

  • Senior Network Security Specialist

    4 semanas atrás

    Rio de Janeiro, Rio de Janeiro, Brasil Cisco Systems Tempo inteiro

    Job SummaryCisco Systems is seeking a Senior Solutions Engineer to join our team in São Paulo or Rio de Janeiro. The ideal candidate will have deep knowledge in Networks, Security Routing, and Wireless.Key ResponsibilitiesProvide technical and sales support for accounts in assigned territory.Stay up-to-date on relevant competitive solutions, products, and...

  • Senior Software Engineer

    3 semanas atrás

    Rio de Janeiro, Rio de Janeiro, Brasil Cronoshare Tempo inteiro

    Job Title: Senior Software Engineer - Frontend DevelopmentAt {company}, we are seeking a highly skilled Senior Software Engineer - Frontend Development to join our team. As a senior member of our team, you will be responsible for developing and maintaining the frontend of our web application using JavaScript, HTML, and CSS. Your primary focus will be on...

  • Cloud security engineer senior

    2 meses atrás

    RIO DE JANEIRO, Brasil IPNET Growth Partner Tempo inteiro

    Você quer fazer parte de uma empresa de tecnologia que está há mais de 20 anos no mercado, que não apenas é parceira premier do Google Cloud, mas também já foi 4 vezes premiada como Partner of the year? Uma empresa que além de ser fera naquilo que faz, também valoriza e leva a  sério o compromisso com cada IPNETER, possuindo há 5 anos...

  • Cloud security engineer pleno

    3 semanas atrás

    Rio de Janeiro, Brasil Ipnet Growth Partner Tempo inteiro

    Você quer fazer parte de uma empresa de tecnologia que está há mais de 20 anos no mercado, que não apenas é parceira premier do Google Cloud, mas também já foi 4 vezes premiada como Partner of the Year? Uma empresa que além de ser fera naquilo que faz, também valoriza e leva a sério o compromisso com cada IPNETER, possuindo há 5 anos consecutivos...

  • Cloud security engineer pleno

    2 meses atrás

    RIO DE JANEIRO, Brasil IPNET Growth Partner Tempo inteiro

    Você quer fazer parte de uma empresa de tecnologia que está há mais de 20 anos no mercado, que não apenas é parceira premier do Google Cloud, mas também já foi 4 vezes premiada como Partner of the year? Uma empresa que além de ser fera naquilo que faz, também valoriza e leva a  sério o compromisso com cada IPNETER, possuindo há 5 anos...

  • Software Engineer

    4 semanas atrás

    Rio De Janeiro, Brasil Tenchi Security Tempo inteiro

    Tenchi is a Cyber Security company that is building innovative technology focused on Third-Party Cyber Risk Management for businesses. Founded by serial entrepreneurs and backed by a solid group of Institutional Investors, we seek to disrupt this rapidly growing industry. Our company is 100% remote and our team is spread across the globe, including Brazil,...

  • Security Engineer

    3 meses atrás

    Rio de Janeiro, Brasil Orange Business Services Tempo inteiro

    about the role Responsibilities Incident Management To manage customer issues and or requests relating to the security technologies according to Service Level Agreement and standard incident management processes. These technologies may include but are not exhaustive to, Fortigate, Checkpoint, Juniper, ZScaler and BigIP. These issues could be...

  • Cloud Security Engineer Sênior

    2 meses atrás

    Rio de Janeiro, Brasil IPNET Growth Partner Tempo inteiro

    Você quer fazer parte de uma empresa de tecnologia que está há mais de 20 anos no mercado, que não apenas é parceira premier do Google Cloud, mas também já foi 4 vezes premiada como Partner of the year? Uma empresa que além de ser fera naquilo que faz, também valoriza e leva a  sério o compromisso com cada IPNETER, possuindo há 5 anos...

  • Cloud Security Engineer Pleno

    2 meses atrás

    Rio de Janeiro, Brasil IPNET Growth Partner Tempo inteiro

    Você quer fazer parte de uma empresa de tecnologia que está há mais de 20 anos no mercado, que não apenas é parceira premier do Google Cloud, mas também já foi 4 vezes premiada como Partner of the year? Uma empresa que além de ser fera naquilo que faz, também valoriza e leva a  sério o compromisso com cada IPNETER, possuindo há 5 anos...