Product Security Engineer

• Partner closely with engineering to refine architecture, validate new features, and drive security investment while prioritizing engineering velocity
• Contribute to secure defaults, libraries, and “paved roads” that systematically eradicate entire classes of vulnerabilities
• Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters
• Ensure Bugcrowd’s bug bounty program can be a model for other customers
• Experiment with new ways to leverage the creativity of the crowd
• Provide feedback on new platform features to engineering and product
• Lead cross-functional product security projects from scoping through delivery
• Influence product and engineering roadmaps
• Clearly communicate risk to technical and non-technical stakeholders
• Use code and automation to scale coverage and eliminate repetitive work
• Build systems based on incentives and accountability rather than bureaucratic process

• 3+ years of experience in product security, application security, or secure software development
• Ability to review code, automate tasks, and build security tooling in at least one modern programming language, such as Python, Go, Ruby, or Java
• Hands-on experience with threat modeling, secure code review, and automated testing including SAST, DAST, and SCA
• Solid grasp of common vulnerability classes, such as the OWASP Top 10
• Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product
• Bachelor's degree in engineering, computer science, or a relevant field, or equivalent practical experience
• Ability to complete all physical requirements with or without reasonable accommodation
• Ability to remain in a stationary position 50% of the time
• Ability to carry or move a laptop as needed throughout the work day
• Requisite integrity to maintain highly confidential and sensitive information in strict confidence
• Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history

• Remote, work-from-home 100% of the time
• Reasonable accommodations for qualified individuals with disabilities
• Benefits and privileges of employment (specific benefits not detailed)