Bugcrowd

• Lead the end to end technical onboarding and configuration of Bug Bounty, Vulnerability Disclosure, Red team and pentest programs for new and existing customers. • Translate customer security requirements into tailored program designs and platform configurations. • Conduct technical program reviews, kickoff meetings, and walkthroughs with customers and internal stakeholders. • Troubleshoot technical issues related to platform integrations, vulnerability workflows and reporting. • Act as a technical point of contact during program launches, ensuring smooth transitions and early success. • Provide expert guidance on offensive security engagements, vulnerability triage, communication workflows, and integration best practices. • Collaborate closely with the Customer Relationship Managers and sales teams to align technical delivery with customer expectations. • Partner with Line of Business Owners, Product, Engineering and Operations team to relay customer feedback and advocate for feature enhancements. • Assist in developing and improving internal onboarding playbooks, technical documentation, and enablement materials. • Support continuous improvement of delivery processes to drive consistency, quality and scalability. • Maintain deep expertise in Bugcrowd’s platform capabilities, bug bounty program models, and pentesting methodologies. • Stay informed on industry trends and evolving security practices to provide innovative customer solutions.

Role Description At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE), you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs. Here are just a few of the reasons why we are the best: - A tenure at Bugcrowd often means you have worked on not only one company’s security program but potentially on hundreds. - As an ASE at Bugcrowd, you will be exposed to the Internet’s best security researchers and their cutting-edge security testing methodologies. - Our ASEs quickly become technically fluent in obscure/complex vulnerabilities such as XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many others. - You will be exposed to things outside of your comfort zone, including security programs for cars, IoT devices, embedded systems, mobile applications, and more! - We have an awesome team and tons of perks. We’ve even been selected as one of “The 10 Coolest Security Startups Of 2016” by crn.com. Qualifications - Bachelor’s degree or previous security consulting experience - Published and demonstrated passion for security assessment research - High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux) - Ability to execute on individual projects but still contribute to the team - Ability to complete tasks on time - Strong organization, influencing, and communication skills Requirements - Strong knowledge of OWASP Top Ten type vulnerabilities - Strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process Benefits - Remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. - Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. - We value the perspectives and experiences people from underrepresented backgrounds bring.

• Assist with the development and maintenance of web applications using Python 3.9, Django, and DRF. • Learn about and participate in the full software development lifecycle. • Assist with code reviews and contribute to improving the security aspects of applications. • Assist in the development of automated tests to ensure application reliability and security. • Contribute to technical documentation (design docs, API documentation, release notes). • Assist with the implementation of integrations with 3rd party services e.g. Google, AWS, ServiceNow. • Learn how to collaborate with the cybersecurity team to identify vulnerabilities and implement secure coding practices.

• Lead all pre-sales technical engagements, including discovery, requirements scoping, and solution architecture design. • Develop and deliver compelling product demonstrations and technical presentations tailored to prospective customer needs. • Serve as the primary technical subject matter expert during the sales cycle for Commercial and Field Accounts. • Provide technical guidance and oversight to the Technical Engagement Managers to ensure successful customer onboarding and program deployment. • Manage and resolve complex technical escalations from internal customer-facing teams. • Collaborate closely with Product and Engineering teams to translate customer feedback and technical gaps into future product requirements. • Interface with Sales, Partners, and Marketing teams to develop technical collateral, best practices, and enablement training. • Maintain expert-level knowledge of the company's product portfolio, underlying technology, and competitive landscape.

• Drive the full sales cycle from prospecting and lead qualification to negotiation and closing deals within the mid-market segment across EMEA. • Develop and maintain a strong understanding of the cybersecurity landscape, competitive offerings, and Bugcrowd's unique value proposition. • Establish strong relationships with key stakeholders, including CISOs, IT Directors, Security Managers, and technical teams. • Establish and maintain strong relationships within our community of Resellers and Distributors to drive new business via a Channel-First sales motion. • Accurately forecast sales opportunities and maintain a robust pipeline using CRM tools (e.g., Salesforce). • Collaborate cross-functionally with Sales Engineering, Customer Success, and Product teams to ensure a seamless customer experience. • Create and deliver compelling, customized sales presentations and demos that clearly articulate the ROI of Bugcrowd's solutions. • Represent Bugcrowd at EMEA industry conferences, trade shows, and regional networking events to build brand awareness and generate new leads. • Negotiate contracts and commercial terms effectively, ensuring favorable outcomes for both the customer and Bugcrowd.

Role Description We are seeking a motivated and driven Associate Penetration Tester to join our team of existing security specialists. This role is a foundational position, focused on developing core skills in offensive security testing under the guidance of more senior team members. As an Associate Penetration Tester, you will be responsible for working through existing methodologies and applying them against assigned targets to identify security vulnerabilities. This will support the team's overall mission of helping improve our client’s infrastructure and codebase by raising high quality (and often high impact) security concerns as evidenced by your capability to exploit. This is an excellent opportunity for an individual with a strong passion for cybersecurity to learn and grow within an elite offensive security team. Primary Role Responsibilities - Conduct Structured Testing to Identify Security Vulnerabilities: - Demonstrating a functional understanding of modern attack vectors and penetration testing software. - Technically capable of using them in the identification of security vulnerabilities in Web applications, APIs, and network infrastructure. - Consistently complete assigned penetration tests within allocated timeframes, and in accordance with our methodologies. - Continuous Learning: - Actively engage in keeping up-to-date with fundamental security concepts and core testing tools. - Apply newly acquired knowledge under instruction and supervision. - Problem Identification & Escalation: - Promptly identify and effectively communicate technical blockers or concerns to mentors or Technical Pentest Managers (TPMs). - Actively seek clarification and guidance to avoid missteps. - Team Support & Documentation: - Assist in test retrospectives, documentation of processes, and provide support to more senior team members as directed by the team lead or manager. - Working Hours: - Be able to execute testing within UK core business hours (09:00 - 17:30 GMT). - Some tests may fall outside of these hours, but the majority of tests will need to be completed within this timeframe. Qualifications - 6+ months as a penetration tester (or equivalent demonstrable experience) with a foundational understanding of wider cybersecurity concepts and best practices. - Familiarity with commonly used security testing tools (e.g. BurpSuite, Nmap) and approach to penetration testing activities. - Strong desire to learn, good communication skills for peer and mentor interactions, and the ability to follow instructions. - Strong written and spoken business English (C1+ or native fluency). - Certifications such as CEH (Certified Ethical Hacker), OSCP(+) (Offensive Security Certified Professional), CPSA (CREST Practitioner Security Analyst), etc. are considered a plus. Working Conditions and Physical Requirements - The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. - Sitting and/or standing - Must be able to remain in a stationary position 50% of the time. - Carrying and/or lifting - Must be able to carry/move laptop as needed throughout the work day. - Environment - remote, work-from-home 100% of the time. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

• Support annual planning (territories, coverage, segmentation) and build reporting for pipeline health, deal trends, and sales performance. • Audit and maintain data integrity across Salesforce and related systems, partnering with Business Systems, Finance, and other teams for operational alignment. • Own day-to-day order management, including quote review, approvals, and accurate booking execution in compliance with internal policies. • Partner with Sales to structure deals efficiently and act as the primary escalation point for complex or non-standard deals to unblock and move them forward. • Manage intake and prioritization of deal desk requests, ensuring timely turnaround and adherence to SLAs. • Enforce compliance with bookings policy and Rules of Engagement (ROE), identifying and flagging risks in deal structure, approvals, and data quality. • Identify inefficiencies across deal desk and quote-to-cash workflows, driving scalable process improvements and partnering with Business Systems on system enhancements. • Support Sales teams with proactive reporting for QBRs, pipeline reviews, forecast calls, and provide simplified dashboards for sales leadership.

• Manage the full project lifecycle for government security and testing contracts, from initiation and planning through execution, monitoring, and closure • Develop and maintain comprehensive project plans, including scope, schedule, budget, and risk management strategies in accordance with federal standards • Coordinate internal resources and external partners for the execution of projects • Ensure all project deliverables adhere to contract requirements, security protocols, and strict government compliance standards • Proactively identify potential project risks and develop mitigation strategies, escalating critical issues to leadership as needed • Facilitate regular project status meetings, compiling and presenting status reports to both internal and client stakeholders

• Responsible for ensuring the design and development of cloud native API first platform. • Expertise in scalable API first architecture, service patterns, and robust API standards for third-party integrations. • Driving modernization efforts toward a highly reliable, service-oriented platform. • Building and maintaining integrations connecting our platform with customer systems, security tools, workflow engines, and more. • Collaborating with designers using our accessible and standards-compliant design system. • Mentoring engineers across multiple teams and contributing to engineering excellence.

Role Description We are looking for a detail-oriented and analytical Software Engineer to join our Integration Engineering team. In this role, you will be responsible for ensuring the design and development of a cloud native API first platform for our patented data and AI-powered Security Knowledge Platform™. - Expertise in scalable API first architecture, service patterns, and robust API standards for third-party integrations - Expertise in the transition to Cloud native architecture - Expertise in AI tools adaptation and strategic outcome oriented responsibility - Driving modernization efforts toward a highly reliable, service-oriented platform - Building and maintaining integrations connecting our platform with customer systems, security tools, workflow engines, and more - Helping evolve our platform into a robust, service-oriented architecture with high reliability - Creating consistent service patterns and ensuring strong guarantees around interfaces and performance - Improving internal engineering tools that support security triage and vulnerability workflows - Collaborating with designers using our accessible and standards-compliant design system (bugcrowd.design) - Ensuring high accessibility, stability, and performance across integration workflows - Deep knowledge of Kafka or similar event streaming platforms - Mentoring engineers across multiple teams and contributing to engineering excellence Qualifications - 2+ years of experience - Bachelor’s or Master’s degree in Computer Science, Engineering, or related field - Experience in Cyber security domain - Strong technical skills - Deep understanding of AI tools and scalability, security, and reliability - Expertise in cloud-native API and microservices architecture - Experience with enterprise UI frameworks - Strong background in agile delivery, backlog management, and stakeholder communication - Excellent problem-solving, prioritization, and decision-making skills Requirements - The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation - Sitting and/or standing - Must be able to remain in a stationary position 50% of the time - Carrying and/or lifting - Must be able to carry/move laptop as needed throughout the work day - Work Environment - Primarily remote, with occasional in-person presence as needed ADA Statement Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ada@bugcrowd.com. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. - Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point - We value the perspectives and experiences people from underrepresented backgrounds bring Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. Equal Employment Opportunity Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Apply at: https://www.bugcrowd.com/about/careers/