bugcrowd

Bugcrowd - San Francisco - (remote for the right people, visa)

We're looking for experienced engineers to join our SF engineering team.

As a member of our engineering team you’ll be in a position to help shape the way we work. It's a very agile development environment where we expect things to change. Because of that we yearn for team members that want to improve the codebase as well as the process that gets code shipped.

Our existing team consists of a broad range of musicians, hipsters, geeks, skateboarders, skiers, snowboarders, nature lovers, Mums & Dads.

We are a very entrepreneurial team and collectively we’ve built, sold, delivered and supported solutions for many enterprise industries. Now as Bugcrowd we do this with the agility and GSD attitude of a startup. We work collaboratively, enjoy working as a team and are extremely focused on happy customers!

Overall it’s not just about what can a new team member do for us, but also how can we help that member be ready for what they want to next, whether it’s acquiring a new technical skill or learning what they need to launch their own business idea.

https://bugcrowd.com/careers

We think it'll be useful.

You're right re the payout amount for blackhats, but it only takes one whitehat to claim a reward for a bug to get killed, and the idea of a sprint is to get a bunch of them focussed on the same target at the same time. We've been running sprints alongside the more traditional ongoing bug bounties since we started, and they're very effective.

Hopefully we will get enough individuals and companies backing this to make the rewards attractive to the right kinds of researchers.

Great to see Github recognizing processes for security researchers between the ages of 13-18 in the FAQ. In the new age of crowdsourced skills, it's good to see age not playing a part as a barrier.