Product Security Engineer
Bugcrowd · Remote - Costa Rica
About this role
**Product Security Engineer** **About Bugcrowd** Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. **Job Summary** If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. **Essential Duties & Responsibilities** - **Partner Closely with Engineering:** Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity. - **Build Security Paved Roads:** Contribute to secure defaults, libraries, and “paved roads” that eradicate entire classes of vulnerabilities—not just fix bugs one by one. - **Create Feedback Loops:** Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters. - **Be our Best Customer:** Ensure the bug bounty program can be a model for other customers; experiment with new ways to leverage the crowd; provide feedback on new platform features to engineering and product. - **Own Projects End to End:** Lead cross-functional product security projects from scoping through delivery; influence product and engineering roadmaps; clearly communicate risk to technical and non-technical stakeholders. - **Amplify our Impact:** Use code and automation to scale coverage and eliminate repetitive work; build systems based on incentives and accountability. **Education, Experience, Knowledge, Skills & Abilities** - 3+ years of experience in product security, application security, or secure software development. - Ability to review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java). - Hands-on experience with core application security practices—threat modeling, secure code review, and automated testing (SAST, DAST, SCA)—and a solid grasp of common vulnerability classes (e.g., OWASP Top 10). - Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. - Bachelor’s degree in engineering, computer science, or relevant field, or equivalent practical experience. **Bonus Points (Preferred but not required)** - Previous experience with bug bounty or vulnerability disclosure programs. - Background building “paved roads” or secure-by-default internal libraries to eliminate entire classes of vulnerabilities. - Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker). - Experience working in a fast-paced, high-growth security or SaaS company. **Working Conditions & Physical Requirements** - Remote, work-from-home **100%** of the time. - Must be able to remain stationary **50%** of the time. - Must be able to carry/move a laptop as needed. **Culture** Bugcrowd values diversity and inclusion, and aims to create a workplace where people feel included and part of building both a great product and a great place to work. **Disclaimer / Background Checks** This role may involve access to highly confidential, sensitive information. Background checks may be conducted for positions involving access to confidential or proprietary
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.