ZipRecruiter

Log In

1

Bug Bounty Manager Jobs in Arizona (NOW HIRING)

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

All JobsBug Bounty JobsBug Bounty Manager JobsBug Bounty Manager Jobs in Arizona

Bug Bounty Manager information

What is a bug bounty manager?

Bug Bounty Managers are professionals responsible for overseeing bug bounty programs, which incentivize security researchers to find and report vulnerabilities in a company's software or systems. They coordinate the design, implementation, and management of these programs, ensuring that reported issues are validated, prioritized, and addressed efficiently. Bug Bounty Managers also communicate with security researchers, internal security teams, and stakeholders to improve the organization's security posture. Their role is crucial in fostering a collaborative relationship between the organization and the security community.

What does a bug bounty manager do?

A Bug Bounty Manager typically spends the week overseeing vulnerability reports, coordinating with security researchers, and prioritizing remediation efforts with engineering teams. They review incoming submissions, validate findings, and communicate with both internal stakeholders and external participants to ensure clear understanding and timely resolution of issues. Collaboration is key in this role, as managers often work closely with developers, legal, and compliance teams to align on security priorities and program updates. Additionally, they may analyze program metrics and provide feedback to improve the bounty process.

What are the key skills and qualifications needed to thrive as a bug bounty manager?

To thrive as a Bug Bounty Manager, you need expertise in cybersecurity, vulnerability management, and a solid understanding of software development, typically supported by a degree in computer science or related field. Familiarity with bug bounty platforms (such as HackerOne or Bugcrowd), vulnerability tracking tools, and relevant certifications like CISSP or CEH is important. Strong communication, analytical thinking, and stakeholder management skills help you coordinate between security researchers and internal teams. These skills ensure effective vulnerability reporting, timely remediation, and the overall security posture of the organization.

What is the difference between Bug Bounty Manager vs Security Analyst?

AspectBug Bounty ManagerSecurity Analyst
Required CredentialsCertifications like OSCP, CEH, or CISSP; experience in bug bounty programsCertifications such as CISSP, GIAC, or CEH; strong knowledge of security protocols
Work EnvironmentFocus on managing bug bounty programs, coordinating with researchers, and analyzing reportsMonitoring security systems, conducting vulnerability assessments, and incident response
Employer & Industry UsageTech companies, cybersecurity firms, organizations running bug bounty programsCorporate security teams, government agencies, consulting firms

The Bug Bounty Manager primarily oversees bug bounty initiatives, managing researcher collaborations and triaging reports. In contrast, a Security Analyst focuses on analyzing security threats, conducting assessments, and maintaining overall security posture. Both roles require security certifications and a strong understanding of vulnerabilities, but their daily tasks and focus areas differ significantly.

What are the most commonly searched types of Bug Bounty jobs in Arizona?

The most popular types of Bug Bounty jobs in Arizona are:

What are popular job titles related to Bug Bounty Manager jobs in Arizona?

For Bug Bounty Manager jobs in Arizona, the most frequently searched job titles are:

What job categories do people searching Bug Bounty Manager jobs in Arizona look for?

The top searched job categories for Bug Bounty Manager jobs in Arizona are:

What cities in Arizona are hiring for Bug Bounty Manager jobs?

Cities in Arizona with the most Bug Bounty Manager job openings:

Bug Bounty Manager jobs near you

Application Security Engineer

SmartRent

Phoenix, AZ • On-site

$58.25 - $78/hr

Full-time

Re-posted 27 days ago

Job description

Job Description

The Application Security Engineer is responsible for supporting the security and privacy of the SmartRent platform through the management of information security risk, system resilience, and compliance activities. This role uses cloud-native and third-party security tools to protect company assets and data across multiple platforms.

This role partners with engineering, development, and external stakeholders to implement and maintain security policies, processes, and standards, including secure software development lifecycle (SDLC) practices. Success in this role requires strong communication skills, the ability to coordinate across multiple technical teams, and the ability to support consistent security practices across the organization.

Responsibilities

  • Develop and execute a comprehensive application security strategy aligned with business objectives and industry standards.
  • Maintain and advise on secure coding standards, security documentation, and application security processes.
  • Deliver application security and privacy training for development teams.
  • Review source code to identify security vulnerabilities, insecure patterns, secrets exposure, and risks associated with AI-generated code.
  • Triage, reproduce, and support remediation of application vulnerabilities (e.g., SQL injection, XSS, access control weaknesses) identified through automated tools (SAST, DAST, SCA) or manual analysis.
  • Manage application security workflows, including task prioritization, ticket tracking, and coordination with development and DevOps teams.
  • Maintain and enhance SmartRent's responsible disclosure and vulnerability reporting program.
  • Partner with developers to implement encryption, hashing, and secure key management practices.
  • Collaborate with developers and engineering teams to perform threat modeling, identify attack paths, and assess weaknesses.
  • Lead the investigation and mitigation of application-level security incidents, collaborating with the SOC and engineering teams to ensure rapid remediation and stakeholder communication.
  • Provide guidance on security and privacy controls for cloud infrastructure (AWS), application development, and IoT hardware.
  • Conduct regular application risk assessments to identify vulnerabilities and emerging threats.
  • Research emerging cybersecurity risks and recommend mitigation strategies as appropriate.
  • Perform adversarial testing and security validation of applications, including internal AI models and services.
  • Use cloud-native security tools to identify and secure large language model (LLM) integrations and implement appropriate security guardrails.

Required Qualifications

  • 4-6 years of experience in application security, including development and maintenance of security policies and collaboration with engineering and release teams.
  • Experience identifying and remediating application vulnerabilities across modern programming languages, including Elixir, JavaScript, Ruby, Python, or similar languages.
  • Strong knowledge of OWASP Top 10, OWASP API Top 10, and modern authentication mechanisms, including JWT and OAuth.
  • Hands-on experience with application security tools, including SAST, DAST, and SCA platforms (e.g., GHAS, Burp Suite, Fortra, or similar tools).
  • Experience working with cloud security controls, including AWS-native tools, web application firewalls (WAF), or similar technologies.
  • Experience managing or supporting vulnerability disclosure or bug bounty programs.
  • Strong written and verbal communication skills, with the ability to clearly communicate security requirements to technical teams.
  • Demonstrated problem-solving and analytical skills in identifying and mitigating application security risks.

Preferred Qualifications

  • Industry certifications such as CSSLP, GIAC GWAPT, CEH, or equivalent security certifications.
  • Experience working with CloudFlare, AWS security services, or similar cloud-native security tools.
  • Experience integrating security practices into SDLC processes.
  • Experience supporting threat modeling or application security architecture reviews.

Apply