Jobs at Bugcrowd

Own and improve ARM and AArch64 emulation support, including instruction semantics, operating-system behavior, ABI variants, system calls, memory management, and execution environments. Diagnose differences between native, QEMU, and analysis-engine execution; improve performance, determinism, observability, and reliability; and develop regression testing. Debug complex binaries and firmware while contributing expertise in low-level systems, binary analysis, fuzzing, and symbolic execution.

Triage and validate vulnerability submissions for managed bug bounty programs, assess validity and severity, communicate with clients and researchers, escalate critical incidents, and support tooling development for security assessment workflows.

Leads and develops Security Consultants while overseeing security submission triage, validation, escalations, and resolution. Provides application security expertise across web, network, cloud, or mobile domains; improves operations through metrics, automation, and process optimization; manages workloads; and partners with customers, leadership, and cross-functional teams. The role requires incident response and vulnerability management experience, technical mentorship, strong communication, and periodic travel for customer-facing and onsite events.

Provides first-line technical support to customers and researchers through tickets, email, and video channels, resolving L0-L2 issues. Documents workarounds and repeatable solutions, contributes to knowledge-base content, and helps improve support workflows. The role requires strong communication, problem-solving, time management, and familiarity with command-line tools and integrations such as Jira, SAML, APIs, and SSO/2FA. Candidates should have 0–2 years of technical support or customer-facing experience; cybersecurity interest is preferred.

Partner with engineering and product teams to embed security into product development. Build secure defaults, libraries, automation, and security tooling; conduct threat modeling and code reviews; tune SAST, DAST, SCA, and secret scanning; lead cross-functional product security projects; and communicate security risks to technical and non-technical stakeholders.

Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Lead architecture and full-stack development for greenfield products and major system changes. Design scalable APIs, UIs, integration services, and durable workflows; integrate SaaS systems, third-party applications, and production LLM capabilities. Document architectural decisions, ensure maintainable code, troubleshoot integrations, improve observability and automation, and mentor teams while driving scalable improvements in delivery and quality.

Design and scale reinforcement learning environments for cybersecurity tasks using verifiable rewards. Build automated vulnerability verification pipelines, sandboxes, test harnesses, telemetry, and low-level instrumentation. Integrate Bugcrowd Mayhem and vulnerability feeds, support large-scale distributed RL workflows, and evaluate AI agents performing fuzzing, exploitation, remediation, and patch validation. The role requires Python and C development, Linux debugging, reproducible builds, security research, and familiarity with reinforcement learning and benchmark environments.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.

The Product Security Engineer partners with engineering and product teams to embed security into architecture, features, and development workflows. Responsibilities include building secure defaults and internal libraries, tuning SAST, DAST, SCA, and secret-scanning tools, conducting threat modeling and code reviews, automating security processes, supporting bug bounty programs, and leading cross-functional product security projects from planning through delivery.

Leads go-to-market efforts for new products, features, and platform capabilities. Develops positioning and messaging, conducts customer and competitive research, creates sales enablement materials, and coordinates cross-functional launches with Product, Engineering, Growth, Sales, Design, and Brand teams. Translates technical cybersecurity concepts into clear customer value and market-facing stories.

Owns retention, customer satisfaction, platform adoption, and renewals for a portfolio of global B2B SaaS accounts. Builds executive relationships, monitors customer health and usage, leads business reviews, coordinates onboarding and technical delivery, resolves issues, communicates product value, and maintains account plans in Gainsight and Salesforce. Partners cross-functionally with Sales, Solutions Architecture, Shared Success, Product, Security, and Program Management to deliver customer outcomes and reduce renewal risk.