Staff Software Engineer (Security Clearance Required)

Description

Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com .

Job Summary

The Staff Full Stack Engineer engineer role in which you lead technical efforts, owning system architecture and development across the stack. You will exercise high discretion over technical decisions to achieve business outcomes.

You will be building external attack surface management technology that builds a picture of a target organization from the outside: domains, hosts, software, people, registrations, documents the customer hands us. You will own the part of the system that turns all of that into facts an analyst can trust: what we observed, what we inferred from it, where each fact came from, and what a human decided about it. Your job is to make it a general framework for passive illumination, so the next data source is a week of work, not a new tab.

Education, Experience, Knowledge, Skills, and Abilities

7+ years of experience of software development experience

Strong proficiency in TypeScript and modern JavaScript.

Extensive experience with React and JavaScript web development frameworks (Next.js preferred)

Familiarity with OAuth2, JWT, and other authentication/authorization frameworks.

Experience with CI/CD pipelines and cloud deployment platforms (Vercel, AWS, Azure, or GCP)

Experience with ORM frameworks and relational databases (Prisma, Drizzle, PostgreSQL)

Excellent debugging, analytical, and problem-solving skills.

Cybersecurity knowledge, such as how penetration testing, OSINT, and red teaming works.

Active secret security clearance is required.

Preferred Experience

Hands-on experience with LLM APIs (OpenAI, Anthropic, etc.) and AI application development

Familiarity with AI orchestration frameworks and agent-based systems

Conditions

Sitting and / or standing - Must be able to remain in a stationary position 50% of the time

Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.

Environment - hybrid, work-from-home most of the time with some onsite work.

The base pay range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to Qualifications, Geographical Location, Education/certifications, Experience, Skill Sets, Training, and other business and organizational needs.

At Bugcrowd, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for the position i s: $151,360 - $189,200.

This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Culture

At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.

We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.

Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.

At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.