Bugcrowd
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
As the project manager, you will be managing:
- Contract + compliance complexity (FAR/DFARS, reporting, audits)
- Research + engineering uncertainty (changing technical direction)
- Multi-stakeholder coordination (gov sponsors, TAs, internal eng/research)
- Milestone-driven funding risk (miss a deliverable → real consequences)
Essential Duties and Responsibilities
- Manage the full project lifecycle for government security and testing contracts, from initiation and planning through execution, monitoring, and closure.
- Develop and maintain comprehensive project plans, including scope, schedule, budget, and risk management strategies in accordance with federal standards.
- Coordinate internal resources and external partners for the execution of projects.
- Ensure all project deliverables adhere to contract requirements, security protocols, and strict government compliance standards.
- Proactively identify potential project risks and develop mitigation strategies, escalating critical issues to leadership as needed.
- Facilitate regular project status meetings, compiling and presenting status reports to both internal and client stakeholders.
- Support public sector growth by assisting in capture management, providing operational expertise and technical writing for new RFPs, RFIs, and grant proposals.
Education, Experience, Knowledge, Skills, and Abilities
- Experience: Minimum of 3 years of project management experience, specifically managing Federal government contracts. Must understand direct costs, indirect costs, and principles of cost accounting, and ability to work with the finance organization for invoicing.
- Security Domain Knowledge: Solid Understanding of the offensive security lifecycle and vulnerability research.
- Soft Skills: Demonstrated ability to communicate effectively and manage relationships with government officials and technical teams.
Preferred Experience
- Clearance: Ability to obtain and maintain a relevant government security clearance.
- Technical Certification: A relevant security certification (e.g., CISSP, Security+).
- Certification: PMP (Project Management Professional) or equivalent project management certification.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time with travel to client sites
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position is: $129,280 - $161,600
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
We’re seeking a hands-on Manager for the AI and Data Science team. This role will manage a high-performing team dedicated to developing data-driven and AI-powered systems that significantly enhance our offensive security capabilities. Your primary focus (70%) will be on setting the technical direction, guiding the team in building scalable data pipelines, and training and deploying predictive models to solve complex cybersecurity challenges. This leadership role also includes mentoring and managing the team. This position is ideal for someone who excels in the technical execution of AI and Data engineering and is ready to lead the development of our next-generation, AI-driven preemptive cybersecurity product alongside a group of exceptional engineers.
Essential Duties and Responsibilities
- Lead Technical Strategy & Execution: Define and drive the technical roadmap for AI, ML, and data systems, overseeing development, deployment, and operationalization to ensure robust performance, scalability, and direct alignment with key business strategy and requirements.
- Team Leadership & Mentorship: Lead, mentor, and grow a small high-performing team of data scientists and ML engineers, cultivating a culture of technical excellence, accountability, and continuous learning.
- AI/ML/Generative Systems Development: Direct the entire lifecycle—from design to deployment—of robust data pipelines, scalable model training, and innovative AI/ML applications. Focus on leveraging these systems to significantly boost analyst and hacker productivity across critical offensive security use cases.
- Model Development and Platform Integration: Guide the development, tuning, deployment, and MLOps of Machine Learning models for cybersecurity. Ensure secure and compliant integration of cutting-edge generative AI models (via platforms like AWS Bedrock, OpenAI, Anthropic) with internal APIs and sensitive security datasets.
- Data Architecture Governance: Architect, govern, and optimize large-scale, high-performance data pipelines essential for securely and efficiently processing massive vulnerability, asset, and activity datasets sourced from various environments.
- Security & Scalability Partnership: Collaborate closely with infrastructure teams to architect AI workloads and data pipelines that meet stringent requirements for security, efficiency, and scalability, particularly within multi-tenant and regulated environments (e.g., FedRAMP, SOC2).
- Cross-Functional Collaboration: Serve as the primary technical subject matter expert and liaison, partnering with security research, product, and platform teams to translate complex offensive security challenges into robust, data-driven automation and intelligence solutions.
- Continuous MLOps Improvement: Establish and manage best-in-class MLOps practices, including CI/CD pipelines, comprehensive evaluation frameworks, and robust monitoring/observability tools to ensure the continuous improvement and reliability of all data and AI systems.
- API Design & Integration: Oversee the design of robust, high-availability APIs and interfaces that facilitate seamless, scalable interaction between LLM agents and internal systems (such as the MCP server) for crucial tasks like search, data enrichment, and automated decision support.
Education, Experience, Knowledge, Skills, and Abilities
- 5+ years of experience in Data Science, ML Engineering, or Data Engineering, with 2+ years in a technical leadership or team lead role.
- Strong architectural understanding of LLM technologies, RAG architectures, prompt engineering, ML Ops, and secure API integration with AI systems.
- Deep expertise with Python, AWS services (S3, Lambda, Batch, Glue, Bedrock, Step Functions, Redshift), and ML frameworks.
- Proven experience successfully leading a team to build and deploy end-to-end ML pipelines—from data ingestion to model deployment, monitoring, and MLOps.
- Ability to design, manage, and govern secure data architectures for large-scale, multi-tenant, and high-security environments.
- Excellent communication skills with a demonstrated ability to mentor engineers, influence technical direction, and present complex concepts to both technical and non-technical audiences.
Preferred Experience
- Deep knowledge of offensive security workflows (bug bounty, vulnerability research, red teaming) and the associated datasets.
- Experience successfully deploying and operating AI solutions within regulated environments (FedRAMP, SOC2).
- Experience and knowledge of software security
- Master’s degree or higher in Computer Science, Information Systems, or a related quantitative field.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position is: $137,600 - $212,850.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
We are looking for a detail-oriented and analytical Software Engineer to join our Integration Engineering team. In this role, you will be responsible for ensuring the design and development of cloud native API first platform for our patented data and AI-powered Security Knowledge Platform™. We aim to create a new era of modern crowdsourced security that outpaces threat actors.
Essential Duties and Responsibilities
- Expertise in scalable API first architecture, service patterns, and robust API standards for third-party integrations
- Expertise in the transition to Cloud native architecture
- Expertise in AI tools adaptation and strategic outcome oriented responsibility
- Driving modernization efforts toward a highly reliable, service-oriented platform.
- Building and maintaining integrations connecting our platform with customer systems, security tools, workflow engines, and more.
- Helping evolve our platform into a robust, service-oriented architecture with high reliability.
- Creating consistent service patterns and ensuring strong guarantees around interfaces and performance.
- Improving internal engineering tools that support security triage and vulnerability workflows.
- Collaborating with designers using our accessible and standards-compliant design system (bugcrowd.design).
- Ensuring high accessibility, stability, and performance across integration workflows.
- Deep knowledge of Kafka or similar event streaming platforms.
- Mentoring engineers across multiple teams and contributing to engineering excellence.
People Manager Responsibility
- This position does not have management responsibilities.
Education, Experience, Knowledge, Skills, and Abilities
- 3+ years of experience
- Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
- Experience in Cyber security domain
- Strong technical skills.
- Deep understanding of AI tools and scalability, security, and reliability.
- Expertise in cloud-native API and microservices architecture.
- Experience with enterprise UI frameworks.
- Strong background in agile delivery, backlog management, and stakeholder communication.
- Excellent problem-solving, prioritization, and decision-making skills.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Work Environment - Primarily remote, with occasional in-person presence as needed.
ADA Statement:
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ada@bugcrowd.com.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
Senior Full Stack Engineer
Share this job
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
This Senior Full Stack Engineer engineer role in which you lead technical efforts across multiple teams or subsystems, owning system architecture and development across the stack. A Senior Software Engineer drives technical innovation, acts as a mentor and process advocate, driving improvements that scale beyond a single team. You will exercise high discretion over technical decisions and influence department-level business outcomes. Providing strong leadership within and across scrum teams to align execution with architectural vision.
Essential Duties and Responsibilities
- Proactively research, prototype, and introduce new technologies or architectural approaches that improve team or org-wide capabilities.
- Own the reliability, observability, and operational excellence of key systems—ensuring they meet or exceed defined SLAs.
- Actively mentor and sponsor engineers across levels, fostering career growth and encouraging broader technical participation.
- Continuously evolve team processes, driving scalable improvements in delivery, quality, and collaboration.
- Drive impact at the team and cross-team level.
- Provide strong technical leadership across one or more scrum teams, aligning execution with architectural vision and business goals.
Education, Experience, Knowledge, Skills, and Abilities
- 6-8 years of experience of software development experience
- Bachelor’s degree in Computer Science, Software Engineering, or related field.
- Strong proficiency in TypeScript and modern JavaScript.
- Extensive experience with React and JavaScript web development frameworks (Next.js preferred)
- Familiarity with OAuth2, JWT, and other authentication/authorization frameworks.
- Experience with CI/CD pipelines and cloud deployment platforms (Vercel, AWS, Azure, or GCP)
- Experience with ORM frameworks and relational databases (Prisma, Drizzle, PostgreSQL)
- Strong understanding of integration patterns (pub/sub, webhook, ETL, etc.).
- Excellent debugging, analytical, and problem-solving skills.
Preferred Experience
- Hands-on experience with LLM APIs (OpenAI, Anthropic, etc.) and AI application development
- Experience building AI automation workflows with n8n or similar platforms (Make, Zapier, Temporal)
- Experience with embeddings, prompt engineering, and semantic search
- Familiarity with AI orchestration frameworks and agent-based systems
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time with travel to client sites
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position of Senior Full Stack Engineer is: $140,400 - $175,500.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
Reinforcement Learning Infrastructure (Cybersecurity)
Share this job
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
The Bugcrowd RL and Reasoning Team focuses on pushing the boundaries of autonomous cybersecurity by building authentic reinforcement learning environments for foundational model companies. As a Staff Engineer, you will advance the frontier of AI Reinforcement Learning development and delivery. You will build the infrastructure and tooling that transforms real-world vulnerability research into large-scale reinforcement learning environments used to train next-generation AI systems.
This role is unique. You will help create the training environments that teach AI systems how to hack and defend software. Your work will directly influence the capabilities of the next generation of AI models. Instead of building a single application, you will build the infrastructure that generates thousands of environments used to train frontier AI systems.
Our team works at the intersection of AI, security research, and systems engineering, building environments that allow models to learn skills such as vulnerability discovery, exploitation, and remediation.
Essential Duties and Responsibilities
If you enjoy building high-performance systems that power cutting-edge AI research, this role is for you.
This role focuses on building the systems that generate RL environments, not just the environments themselves. You will design pipelines that ingest software projects, analyze them with Bugcrowd’s Mayhem platform, and automatically construct training environments used by frontier AI labs including Anthropic, OpenAI, and Cohere.
The ideal candidate is a strong systems engineer who understands:
- Reinforcement learning workflows
- Building clean, reproducible Linux ML environments (containers, MCP, etc)
- System security background in binary exploitation, such as buffer overflows, fuzzing, exploitation, and x86/64.
- Experience developing applications in Python and C, with Rust a plus.
Education, Experience, Knowledge, Skills, and Abilities
Understanding of RL training workflows used by modern LLM systems
- Experience with DevOps pipelines (e.g., github actions), reproducible builds (docker, buildkit, nix).
- Proficiency in Python and C. Other languages (especially Rust) are a plus.
- Understanding of software vulnerabilities, fuzzing, or program analysis
- Experience with build systems and large open-source codebases
- Comfort working with Linux systems and low-level debugging
- Experience working with benchmark environments (CTFs, SWE-bench, security challenges, etc.) is a plus
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position of $176,400 - $242,550.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
Staff Software Engineer (Identity and Access Management)
Share this job
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
We are seeking an experienced and highly-skilled Staff Software Engineer to join our Identity and Access Management (IAM) team. In this pivotal role, you will be responsible for designing, developing, and maintaining the core services that manage user identity, authentication, and authorization across our platform. The ideal candidate possesses deep expertise in modern identity protocols and practices, and has a proven track record of architecting secure, scalable, and reliable IAM solutions in a large-scale, distributed environment.
Essential Duties and Responsibilities
- Architect and Design: Lead the architectural design and implementation of highly available and performant IAM services, including authentication workflows, authorization systems, and identity provisioning.
- Protocol Expertise: Serve as the technical expert for industry-standard identity protocols, ensuring robust implementation and adherence to best practices for Single Sign-On (SSO), SAML, SCIM, and OAuth/OIDC.
- System Security: Drive the security posture of identity systems, focusing on secure inter-service communication, token management, and fine-grained authorization permission schemes (e.g., RBAC, ABAC).
- Technical Leadership: Mentor and guide mid-level and junior engineers on the team, conducting code reviews, setting technical standards, and advocating for engineering excellence.
- Cross-Functional Collaboration: Partner closely with Security, Product Management, and other engineering teams to define requirements, integrate IAM services, and ensure a seamless and secure user experience.
- Operational Excellence: Troubleshoot complex production issues related to identity flows, optimize service performance, and contribute to the monitoring and alerting strategy for critical IAM infrastructure.
Education, Experience, Knowledge, Skills, and Abilities
- 7+ years of professional software development experience, with a focus on building distributed, highly-available services.
- Deep, hands-on experience designing and implementing solutions utilizing core identity protocols:
- Single Sign-On (SSO)
- SAML (Security Assertion Markup Language)
- OAuth 2.0 / OIDC (OpenID Connect)
- SCIM (System for Cross-domain Identity Management)
- Proven experience with inter-service authentication and authorization mechanisms (e.g., token-based authentication, API gateways, mTLS).
- Strong understanding of various authorization permission schemes (e.g., Role-Based Access Control - RBAC, Attribute-Based Access Control - ABAC).
- Bachelor’s degree in Computer Science, related technical field, or equivalent practical experience.
Preferred Experience
- Experience with a modern programming language (e.g., Go, Java, Ruby, Node.js) and working with cloud platforms (AWS, Azure, or GCP).
- Experience with identity providers (IdPs) and services like Okta, Azure AD, Ping Identity, Keycloak, or Auth0.
- Familiarity with cryptography principles and secure coding practices.
- Demonstrated ability to drive large, complex, and ambiguous projects to completion.
- Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to a diverse audience.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position is: $137,600 - $212,850.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
We are looking for a detail-oriented and analytical Senior Software Engineer to join our Integration Engineering team. In this role, you will be responsible for ensuring the design and development of cloud native API first platform for our patented data and AI-powered Security Knowledge Platform™. We aim to create a new era of modern crowdsourced security that outpaces threat actors.
Essential Duties and Responsibilities
- Expertise in scalable API first architecture, service patterns, and robust API standards for third-party integrations
- Expertise in the transition to Cloud native architecture
- Expertise in AI tools adaptation and strategic outcome oriented responsibility
- Driving modernization efforts toward a highly reliable, service-oriented platform.
- Building and maintaining integrations connecting our platform with customer systems, security tools, workflow engines, and more.
- Helping evolve our platform into a robust, service-oriented architecture with high reliability.
- Creating consistent service patterns and ensuring strong guarantees around interfaces and performance.
- Improving internal engineering tools that support security triage and vulnerability workflows.
- Collaborating with designers using our accessible and standards-compliant design system (bugcrowd.design).
- Ensuring high accessibility, stability, and performance across integration workflows.
- Deep knowledge of Kafka or similar event streaming platforms.
- Mentoring engineers across multiple teams and contributing to engineering excellence.
People Manager Responsibility
- This position does not have management responsibilities.
Education, Experience, Knowledge, Skills, and Abilities
- 5+ years of experience
- Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
- Experience in Cyber security domain
- Strong technical skills.
- Deep understanding of AI tools and scalability, security, and reliability.
- Expertise in cloud-native API and microservices architecture.
- Experience with enterprise UI frameworks.
- Strong background in agile delivery, backlog management, and stakeholder communication.
- Excellent problem-solving, prioritization, and decision-making skills.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Work Environment - Primarily remote, with occasional in-person presence as needed.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
Cleared Vulnerability Research Engineer
Share this job
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
This role is focused on end-to-end exploit development for real-world targets. The specialist will design, develop, and validate novel vulnerability discovery and exploitation capabilities against complex software and systems. Work is conducted at the operating system, binary, and micro-architectural levels, with a strong emphasis on creating new technical capabilities. Success in this position requires the ability to independently translate an under-defined mission objective into a concrete, technically novel capability and the comfort of operating with minimal supervision, incomplete problem definitions, and delayed feedback.
Education, Experience, Knowledge, Skills, and Abilities
- Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
- Conduct expert reverse engineering of binaries (x86-64, ARM64, etc.) using industry-standard tools.
- Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, Integer truncation, and Buffer overflow.
- Demonstrate ability to discover new, novel vulnerabilities in complex systems.
- Rapidly understand current vulnerability research and apply findings to identify new instances of vulnerability classes.
- Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery.
- Code and debug complex functions in C, Python, and Assembly (x86-64, ARM, etc.).
- Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration.
- Travel to customer sites as required.
- Perform on-site for extended periods of time.
Education, Experience, Knowledge, Skills, and Abilities
- Exploit Development:
- Expertise in reverse engineering of binaries (x86-64, ARM64, etc) using tools such as Binary Ninja, Ghidra, or IDA Pro.
- Precise understanding of stack and heap objects and exploit-relevant vulnerabilities (e.g., Use-after-free, Type confusion, Integer truncation, Buffer overflow).
- Vulnerability Discovery:
- Demonstrated ability to discover new vulnerabilities, not just exploit known ones.
- Experience with both manual analysis and automated techniques (e.g., fuzzing).
- Languages:
- Ability to code and debug C, Python, and Assembly (x86-64, ARM, etc).
- Research Ownership & Autonomy:
- Ability to independently translate an under defined mission objective into a concrete, technically novel capability.
- Comfort operating with minimal supervision.
- Clearance & Logistics:
- TS/SCI clearance required (inactive SCI acceptable if SCI-clearable).
- Ability to travel to customer sites as required.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home with travel to customer location in Alabama to perform work in cleared spaces.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position is $154,800 - $193,500.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
Manager, Engineering (Identity and Access Management)
Share this job
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
We are seeking an experienced and passionate Software Engineering Manager to lead our Identity and Access Management (IAM) team. This critical role involves overseeing the design, development, and operation of secure, scalable, and highly available authentication, authorization, and identity services that underpin our entire product ecosystem. The ideal candidate has a strong technical background in modern identity standards and a proven track record of managing and mentoring high-performing engineering teams.
Essential Duties and Responsibilities
Team Leadership and Management
- Lead, mentor, and grow a team of software engineers, fostering a culture of technical excellence, collaboration, and continuous improvement.
- Manage team performance, including hiring, goal setting, performance reviews, and career development.
- Define and refine team processes, development methodologies (e.g., Agile/Scrum), and quality standards to ensure efficient delivery of robust solutions.
- Serve as the technical expert and escalation point for the IAM domain, driving architectural decisions and ensuring alignment with company-wide security and compliance goals.
Technical Strategy and Execution
- Develop and execute the long-term technical roadmap for the company's identity and access management platform.
- Oversee the design and implementation of core identity services, including user registration, login, profile management, and multi-factor authentication (MFA).
- Drive the adoption and maintenance of industry-standard protocols and technologies, such as SSO (Single Sign-On), SAML, OAuth 2.0/OIDC (OpenID Connect), robust Inter-Service Authentication (e.g., mTLS, JWTs) and Authorization permission schemes.
- Ensure the IAM platform meets stringent requirements for security, reliability, scalability, and latency.
- Collaborate with security, compliance, and product teams to integrate identity solutions seamlessly across all applications and infrastructure.
People Manager Responsibility
- Lead and mentor a team of software engineers to deliver high-quality services.
- Manage and grow team performance, goals, and career development.
- Balance people leadership, technical guidance, and delivery management.
- Hire, onboard, and retain top engineering talent; build a high-performing team.
- Remove blockers, manage risks, and facilitate effective communication across teams.
Education, Experience, Knowledge, Skills, and Abilities
- Bachelor's or Master's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- 5+ years of experience in software development, with a focus on high-scale backend systems.
- 2+ years of experience managing and leading a team of software engineers.
- Deep, demonstrable expertise in Identity and Access Management (IAM) and core identity concepts.
- Hands-on experience implementing and managing systems utilizing SAML, OAuth 2.0/OIDC, and other modern authentication/authorization frameworks.
- Strong understanding of security best practices, cryptography, and common web application vulnerabilities related to identity (e.g., session hijacking, token manipulation).
- Experience with cloud identity platforms (e.g., AWS IAM, Azure AD, Okta, Auth0) is highly desirable.
Preferred Experience
- Experience with a modern programming language (e.g., Go, Java, Ruby, Node.js) and working with cloud platforms (AWS, Azure, or GCP).
- Experience with identity providers (IdPs) and services like Okta, Azure AD, Ping Identity, Keycloak, or Auth0.
- Familiarity with cryptography principles and secure coding practices.
- Demonstrated ability to drive large, complex, and ambiguous projects to completion.
- Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to a diverse audience.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position is: $137,600 - $212,850.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-driven CrowdMatch™ technology in our platform finds the perfect talent for your unique fight. We aim to create a new era of modern crowdsourced security that outpaces threat actors. Unleash the ingenuity of the hacker community with Bugcrowd, visit www.bugcrowd.com. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.
Job Summary
We are seeking a highly skilled Software Architect to design, implement, and optimize cloud-native platforms that support modern API-driven systems and microfrontend applications. You will define architectural standards, lead cloud-native design efforts, and collaborate closely with frontend and platform teams to ensure seamless integration between microservices, APIs, and microfrontends.
The ideal candidate will have deep expertise in cloud security best practices, infrastructure-as-code (IaC), and optimizing distributed, high-availability, and fault-tolerant systems that underpin our industry-leading crowdsourced security platform. You will be instrumental in defining our cloud strategy and ensuring our infrastructure scales securely and efficiently to meet the demands of our global customer base.
Essential Duties and Responsibilities
Cloud-Native Architecture & Design
- Architect cloud-native backend systems optimized for scalability, resilience, and cost-efficiency.
- Define and promote cloud-optimized design patterns such as microservices, event-driven architecture, service mesh, and containerized workloads.
- Ensure backend systems integrate cleanly with microfrontend architectures through well-designed APIs and edge services.
- Create architectural blueprints, system diagrams, and technical standards for cloud-native platforms.
API-First Strategy
- Champion an API-first design methodology, ensuring all services expose clear, versioned, documented, and secure APIs.
- Collaborate with frontend/microfrontend teams to define and evolve API contracts that ensure consistency across the platform.
- Implement API governance, gateways, and standards to support scale and maintainability.
Microservices & Backend Engineering
- Design and maintain modular, scalable microservices aligned with business domains (DDD, bounded contexts).
- Optimize backend performance, latency, scalability, and fault tolerance.
- Provide architectural guidance to backend teams around service decomposition, data ownership, caching strategies, and observability.
Cloud Strategy & Architecture
- Develop and maintain the multi-cloud architecture strategy (AWS/GCP), focusing on resilience, cost optimization, performance, and security.
- Design and document scalable, reliable, and secure cloud environments for new and existing platform components.
- Evaluate and recommend new cloud technologies and services to improve platform capabilities and operational efficiency.
- Collaborate with engineering and product teams to translate business requirements into robust, scalable cloud infrastructure designs.
Infrastructure & Operations
- Lead the adoption and continuous improvement of Infrastructure-as-Code (IaC) practices using tools like Terraform or Pulumi.
- Oversee and mentor teams in the deployment, monitoring, and maintenance of cloud resources and services (e.g., Kubernetes, serverless components, databases, networking).
- Establish and enforce best practices for configuration management, continuous integration/continuous deployment (CI/CD), and automated provisioning/de-provisioning.
- Implement comprehensive monitoring, logging, and alerting strategies to ensure high visibility into system health and performance.
Security & Compliance
- Embed security principles and controls into the cloud architecture from the initial design phase (Security by Design).
- Work closely with the Security team to ensure all cloud infrastructure meets Bugcrowd's stringent security standards and compliance requirements (e.g., SOC 2, ISO 27001).
- Implement and manage cloud security tools, identity and access management (IAM) policies, and network security controls (VPCs, firewalls, security groups).
Leadership & Collaboration
- Act as the subject matter expert for all cloud-related infrastructure and architecture decisions.
- Provide technical guidance and mentorship to development and operations teams on cloud technologies and best practices.
- Drive standardization across infrastructure services and deployment methodologies.
Education, Experience, Knowledge, Skills, and Abilities
- Experience: 10+ years of cloud, platform, and backend engineering experience, with strong expertise in distributed system
- 4+ years architecting cloud-native solutions on AWS, Azure, or GCP.
- Strong proficiency in at least one backend language (Go, Java, Python, Node.js, .NET, etc.).
- Experience designing and scaling microservices architectures.
- Strong understanding of API-first design, RESTful services, GraphQL, or asynchronous APIs.
- Solid experience with Docker, Kubernetes, and container orchestration.
- Familiarity with supporting microfrontend ecosystems through well-structured backend APIs and edge services.
- Deep knowledge of networking, security, observability, and cloud infrastructure.
- Experience with both relational and NoSQL databases (e.g., PostgreSQL, MongoDB, DynamoDB).
- Deep practical experience with Kubernetes (EKS/GKE), Docker, and containerized deployment strategies.
- Excellent debugging, analytical, and problem-solving skills.
Preferred Experience
- Professional cloud certification (e.g., AWS Certified Solutions Architect - Professional, Google Cloud Professional Cloud Architect).
- Experience in a high-growth SaaS environment or security industry company.
- Familiarity with compliance frameworks (SOC 2, ISO 27001).
- Experience with service mesh technologies (e.g., Istio, Linkerd).
- Background in event-driven systems (Kafka, Kinesis, Pub/Sub).
- Familiarity with microfrontend frameworks and patterns (Module Federation, Web Components).
- Experience in building large-scale SaaS or multi-tenant platforms.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position of Software Architect is: $156,800 - $293,535.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
- At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
- We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
- Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at: https://www.bugcrowd.com/about/careers/
Ready to apply?
Apply to Bugcrowd