Jobs at Bugcrowd

Partner with engineering and product teams to embed security into product development. Build secure defaults, libraries, automation, and security tooling; conduct threat modeling and code reviews; tune SAST, DAST, SCA, and secret scanning; lead cross-functional product security projects; and communicate security risks to technical and non-technical stakeholders.

Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Lead architecture and full-stack development for greenfield products and major system changes. Design scalable APIs, UIs, integration services, and durable workflows; integrate SaaS systems, third-party applications, and production LLM capabilities. Document architectural decisions, ensure maintainable code, troubleshoot integrations, improve observability and automation, and mentor teams while driving scalable improvements in delivery and quality.

Design and scale reinforcement learning environments for cybersecurity tasks using verifiable rewards. Build automated vulnerability verification pipelines, sandboxes, test harnesses, telemetry, and low-level instrumentation. Integrate Bugcrowd Mayhem and vulnerability feeds, support large-scale distributed RL workflows, and evaluate AI agents performing fuzzing, exploitation, remediation, and patch validation. The role requires Python and C development, Linux debugging, reproducible builds, security research, and familiarity with reinforcement learning and benchmark environments.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Communicate with clients and security researchers, determine vulnerability validity, accuracy, and severity, escalate critical incidents, and support application security tooling through scripting or development. The role requires strong knowledge of OWASP vulnerabilities, security assessment tools, technical research, organization, independent execution, and effective communication. This is a fully remote position.

The Product Security Engineer partners with engineering and product teams to embed security into architecture, features, and development workflows. Responsibilities include building secure defaults and internal libraries, tuning SAST, DAST, SCA, and secret-scanning tools, conducting threat modeling and code reviews, automating security processes, supporting bug bounty programs, and leading cross-functional product security projects from planning through delivery.

Leads go-to-market efforts for new products, features, and platform capabilities. Develops positioning and messaging, conducts customer and competitive research, creates sales enablement materials, and coordinates cross-functional launches with Product, Engineering, Growth, Sales, Design, and Brand teams. Translates technical cybersecurity concepts into clear customer value and market-facing stories.

Owns retention, customer satisfaction, platform adoption, and renewals for a portfolio of global B2B SaaS accounts. Builds executive relationships, monitors customer health and usage, leads business reviews, coordinates onboarding and technical delivery, resolves issues, communicates product value, and maintains account plans in Gainsight and Salesforce. Partners cross-functionally with Sales, Solutions Architecture, Shared Success, Product, Security, and Program Management to deliver customer outcomes and reduce renewal risk.