Product Security Engineer; Fully Remote

• We're looking for security engineers who move beyond standard tooling and drive measurable security outcomes.
• You'll shape a culture where security helps others succeed, not just points out problems.

• Partner closely with engineering to validate new features and drive security investment.
• Build secure defaults and paved roads that systematically eradicate vulnerability classes.
• Tune security tooling like SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters.

• You have 3+ years in product security, application security, or secure software development.
• You can review code, automate tasks, and build security tooling in Python, Go, Ruby, or Java.
• You have hands-on experience with threat modeling, secure code review, and automated testing.

• We value diversity and inclusion, solving security threats relevant to everyone.
• Our team includes musicians, adventurers, parents, and night owls—a broad range of backgrounds.
• We strive to make Bugcrowd not only a great product but a great place to work.

Bugcrowd is a preemptive security platform that unifies exposure discovery and assessment, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. Founded in 2012 and based in San Francisco, Bugcrowd is a VC-backed company with a diverse, inclusive culture where people feel like family.