ZipRecruiter

Log In

1

Freelance Bug Bounty Program Jobs in Arizona (NOW HIRING)

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

SmartRent

Application Security Engineer

Phoenix, AZ

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

SmartRent

Application Security Engineer

Phoenix, AZ · On-site

$58.25 - $78/hr

Experience managing or supporting vulnerability disclosure or bug bounty programs. * Strong written and verbal communication skills, with the ability to clearly communicate security requirements to ...

All JobsBug Bounty Program JobsFreelance Bug Bounty Program JobsFreelance Bug Bounty Program Jobs in Arizona

Freelance Bug Bounty Program information

What is a freelance bug bounty program?

Freelance bug bounty programs are initiatives run by companies or platforms that invite independent security researchers—often called ethical hackers—to identify and report vulnerabilities in their software or systems. Participants work on a freelance basis, choosing which programs to join and which vulnerabilities to hunt for, and are typically rewarded with monetary payouts or recognition for valid findings. This model helps organizations discover and fix security issues before they can be exploited maliciously, while providing freelancers with income and experience in cybersecurity. Anyone with the necessary skills can participate, making it a flexible career or side job for security enthusiasts.

What are the key skills and qualifications needed to thrive as a freelance bug bounty hunter?

To thrive as a Freelance Bug Bounty Hunter, you need a solid understanding of web application security, programming/scripting languages, and vulnerability assessment methodologies—often demonstrated by hands-on experience or certifications like OSCP. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential for effective testing and reporting. Standout soft skills include analytical thinking, persistence, attention to detail, and clear written communication for submitting thorough vulnerability reports. These skills are crucial for identifying and responsibly disclosing security flaws, earning rewards, and building a strong reputation in the cybersecurity community.

What are some common challenges faced by freelancers participating in bug bounty programs, and how can they be overcome?

Freelancers in bug bounty programs often face challenges such as intense competition from other researchers, staying updated with the latest security vulnerabilities, and navigating varying program rules. To overcome these, it's important to continually hone your technical skills, engage with the security community for knowledge sharing, and thoroughly review each program's scope and guidelines before submitting reports. Building a reputation for high-quality, well-documented submissions can also help you stand out and secure more consistent rewards.

What is the difference between Freelance Bug Bounty Program vs Freelance Penetration Tester?

AspectFreelance Bug Bounty ProgramFreelance Penetration Tester
CredentialsKnowledge of security testing, bug reportingCertifications like OSCP, CEH, CISSP often preferred
Work EnvironmentRemote, project-based, online platformsRemote or on-site, client-specific engagements
Industry UsageTech companies, cybersecurity platformsConsulting firms, corporate security teams
Search & Comparison IntentFocus on bug bounty programs, online testingFocus on security assessments, penetration testing

While both roles involve security testing, Freelance Bug Bounty Programs primarily focus on identifying vulnerabilities through online platforms and reporting bugs, often without formal certifications. Freelance Penetration Testers conduct comprehensive security assessments, often requiring certifications and on-site work. The choice depends on your skills, certifications, and preferred work environment.

What are the most commonly searched types of Bug Bounty Program jobs in Arizona?

The most popular types of Bug Bounty Program jobs in Arizona are:

What are popular job titles related to Freelance Bug Bounty Program jobs in Arizona?

For Freelance Bug Bounty Program jobs in Arizona, the most frequently searched job titles are:

What job categories do people searching Freelance Bug Bounty Program jobs in Arizona look for?

The top searched job categories for Freelance Bug Bounty Program jobs in Arizona are:

What cities in Arizona are hiring for Freelance Bug Bounty Program jobs?

Cities in Arizona with the most Freelance Bug Bounty Program job openings:

Freelance Bug Bounty Program jobs near you

Application Security Engineer

SmartRent

Phoenix, AZ • On-site

$58.25 - $78/hr

Full-time

Re-posted 23 days ago

Job description

Job Description

The Application Security Engineer is responsible for supporting the security and privacy of the SmartRent platform through the management of information security risk, system resilience, and compliance activities. This role uses cloud-native and third-party security tools to protect company assets and data across multiple platforms.

This role partners with engineering, development, and external stakeholders to implement and maintain security policies, processes, and standards, including secure software development lifecycle (SDLC) practices. Success in this role requires strong communication skills, the ability to coordinate across multiple technical teams, and the ability to support consistent security practices across the organization.

Responsibilities

  • Develop and execute a comprehensive application security strategy aligned with business objectives and industry standards.
  • Maintain and advise on secure coding standards, security documentation, and application security processes.
  • Deliver application security and privacy training for development teams.
  • Review source code to identify security vulnerabilities, insecure patterns, secrets exposure, and risks associated with AI-generated code.
  • Triage, reproduce, and support remediation of application vulnerabilities (e.g., SQL injection, XSS, access control weaknesses) identified through automated tools (SAST, DAST, SCA) or manual analysis.
  • Manage application security workflows, including task prioritization, ticket tracking, and coordination with development and DevOps teams.
  • Maintain and enhance SmartRent's responsible disclosure and vulnerability reporting program.
  • Partner with developers to implement encryption, hashing, and secure key management practices.
  • Collaborate with developers and engineering teams to perform threat modeling, identify attack paths, and assess weaknesses.
  • Lead the investigation and mitigation of application-level security incidents, collaborating with the SOC and engineering teams to ensure rapid remediation and stakeholder communication.
  • Provide guidance on security and privacy controls for cloud infrastructure (AWS), application development, and IoT hardware.
  • Conduct regular application risk assessments to identify vulnerabilities and emerging threats.
  • Research emerging cybersecurity risks and recommend mitigation strategies as appropriate.
  • Perform adversarial testing and security validation of applications, including internal AI models and services.
  • Use cloud-native security tools to identify and secure large language model (LLM) integrations and implement appropriate security guardrails.

Required Qualifications

  • 4-6 years of experience in application security, including development and maintenance of security policies and collaboration with engineering and release teams.
  • Experience identifying and remediating application vulnerabilities across modern programming languages, including Elixir, JavaScript, Ruby, Python, or similar languages.
  • Strong knowledge of OWASP Top 10, OWASP API Top 10, and modern authentication mechanisms, including JWT and OAuth.
  • Hands-on experience with application security tools, including SAST, DAST, and SCA platforms (e.g., GHAS, Burp Suite, Fortra, or similar tools).
  • Experience working with cloud security controls, including AWS-native tools, web application firewalls (WAF), or similar technologies.
  • Experience managing or supporting vulnerability disclosure or bug bounty programs.
  • Strong written and verbal communication skills, with the ability to clearly communicate security requirements to technical teams.
  • Demonstrated problem-solving and analytical skills in identifying and mitigating application security risks.

Preferred Qualifications

  • Industry certifications such as CSSLP, GIAC GWAPT, CEH, or equivalent security certifications.
  • Experience working with CloudFlare, AWS security services, or similar cloud-native security tools.
  • Experience integrating security practices into SDLC processes.
  • Experience supporting threat modeling or application security architecture reviews.

Apply