HackerOne

Product Security Analyst

Washington DC · Contract

No sponsorship$135k-$155kDetected 26 days ago

Agentic AICybersecuritySensorsResearchLeadershipCommunicationCollaborationProblem Solving

About the role

HackerOne is a global leader in offensive security solutions.
Our HackerOne Platform combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the software development lifecycle.
As a Product Security Analyst, you will join HackerOne's Technical Services organization and work directly with some of the world's most skilled security researchers to help customers identify and remediate impactful vulnerabilities.

Independently reproduce reported vulnerabilities across web and mobile applications, applying First Principles Problem Solving to validate findings, identify root causes, and clearly communicate impact.
Create concise, technically accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance.
Partner cross-functionally with Technical Services teammates and customer-facing teams to ensure timely handling of vulnerabilities and a high-quality customer experience.
Offensive security is no longer optional - it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever.
We're committed to building a global team!

3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications.
Experience using security testing tools such as Burp Suite and familiarity with vulnerability scoring frameworks including CVSS.
Excellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences.

Experience participating in bug bounty or vulnerability disclosure programs.
Familiarity with scripting or automation used in security testing or operational workflows.
Tier A (SF Bay Area) - $135,000 to $155,000
Employee Assistance Program
Eligibility may differ by country
Visa/work permit sponsorship is not available.
Employment at HackerOne is contingent on a background check.
HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.

Health (medical, vision, dental), life, and disability insurance*
Equity stock options
Retirement plans
Paid public holidays and unlimited PTO
Paid maternity and parental leave
Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)
This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship.

Evaluate vulnerability reports submitted by security researchers to determine validity, severity, exploitability, and business impact for HackerOne customers using Data-Driven Decision Making and established security frameworks such as CVSS.
Collaborate directly with security researchers to gather missing information, clarify technical details, and improve report quality while maintaining clear and professional communication with customers.
HackerOne is at a pivotal inflection point in the security industry.
You will play a critical role in validating, reproducing, and communicating security findings across bug bounty and vulnerability disclosure programs while helping maintain a high-quality experience for both customers and hackers.

This listing is sourced directly from HackerOne's careers page and normalized into a canonical job model.