Application Security Engineer II (Contract - 5 months )
Core
Triage, validate, and manage security vulnerability submissions for bug bounty programs, handling incident response for high-severity bugs.
Role type
Application Security Engineer (Triage & Validation)
Builds
Validated vulnerability reports and incident response communications for client security programs
Domain
Cybersecurity / Application Security
Deliverable
client delivery
Required skills
Vulnerability triage and validation, OWASP Top Ten knowledge, scripting/development language proficiency, Burp Suite, industry standard security tools (nmap, sqlmap, Kali Linux)
Preferred skills
Experience with XSS, SQLi, XXE, IDOR, SSTI, SSRF
Responsibilities
Curate incoming submission data for validity, accuracy, and severity; communicate with clients or researchers for additional information; escalate and communicate highest severity bugs to clients; assist in designing or developing tooling for triage/validation processes
Seniority
Mid-level, hands-on IC
