Software Engineer (Python, LangChain, RAG)
About the Company:
HackerOne is a global leader in Continuous Threat Exposure Management (CTEM), helping organizations continuously discover, validate, prioritize, and remediate security exposures across code, cloud, and AI systems. Its platform combines agentic AI solutions with the expertise of the world's largest community of security researchers. The company's solutions include bug bounty programs, vulnerability disclosure, agentic penetration testing, AI red teaming, and code security. Organizations such as Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, the UK Ministry of Defence, and the U.S. Department of Defense rely on HackerOne to protect their digital environments. HackerOne combines human intelligence with AI-powered security technology to help organizations strengthen their security and respond to evolving threats. Its culture is guided by three core values: Customer Obsessed, Default to Disclosure, and Win Together, emphasizing customer outcomes, transparency, inclusion, respect, and accountability.
About the Role:
HackerOne is seeking a Software Engineer, Applied AI to join its AI Platform team and help develop next-generation AI security capabilities, including its in-platform AI security agent, Hai. In this role, you will build and integrate AI-powered features that support vulnerability discovery, improve security analysis workflows, and help customers detect and respond to emerging threats. Your work will involve LLM-powered applications, retrieval-augmented generation (RAG) pipelines, AI orchestration, and secure integrations between AI models and internal systems. You will collaborate with Product, Security Research, and Customer Success teams to translate user needs into reliable technical solutions. The position requires a practical problem-solving approach, an interest in emerging AI technologies, and the ability to adapt as AI frameworks and security requirements evolve.
Key Responsibilities:
Build and integrate AI capabilities, including LLM-powered workflows, RAG pipelines, and orchestration components, to improve vulnerability detection and security automation.
Break down AI and security challenges into clear components, identify core assumptions, and develop simple, maintainable solutions.
Evaluate model performance, test hypotheses, analyze telemetry, and improve features based on measurable results.
Adapt to evolving AI frameworks, product requirements, and security considerations while maintaining development progress.
Contribute to the development of HackerOne's AI security agent, Hai, by implementing features that support natural language insights, reasoning workflows, and secure model interactions.
Build and maintain APIs and services that enable secure communication between AI models, internal systems, and third-party platforms.
Collaborate with Product, Security Research, and Customer Success teams to understand requirements, translate user needs into technical tasks, and deliver reliable solutions.
Stay informed about emerging AI and AI security developments, share relevant insights with the team, and incorporate useful advancements into development work.
Required Qualifications:
- 3+ years of experience as a Software Engineer, including hands-on experience building production systems.
- Experience integrating large language models (LLMs) or generative AI models into applications.
- Hands-on experience with machine learning frameworks such as PyTorch, TensorFlow, or Hugging
- Face Transformers.
- Ability and willingness to work from the office once per week, typically on Thursdays.
Preferred Qualifications:
Familiarity with agentic frameworks such as ReAct, AutoGen, LangChain, or Semantic Kernel.
Experience with RAG architectures, prompt engineering, fine-tuning, or LLM evaluation techniques.
Exposure to cloud-based AI and machine learning services such as AWS Bedrock, GCP Vertex AI, or Azure ML.Familiarity with full-stack technologies such as Ruby on Rails, GraphQL, or React for integrating AI features into production systems.
Job Location and Work Arrangement:
This is a remote position targeted at candidates located within approximately 50 miles of one of the following offices: Seattle, Washington
Boston, Massachusetts:
Washington, DCAustin, Texas Employees must be able and willing to work from the office one day per week, typically Thursday. HackerOne follows a Flexible Work approach that combines remote work with occasional in-person collaboration.
Salary and Compensation:
The compensation range for this position is $166,000–$203,000. The role is also eligible for equity.
Benefits:
Medical, dental, and vision insurance.
Life and disability insurance.
Equity stock options.
Retirement plans.
Paid public holidays and unlimited paid time off.
Paid maternity and parental leave.
Leaves of absence, including caregiver leave and leave under Colorado's Healthy Families and Workplaces Act.
Employee Assistance Program.
Benefit eligibility may differ by country.
International Employment and Work Authorization:
HackerOne is committed to building a global team. For certain roles outside the United States, India, the United Kingdom, and the Netherlands, the company partners with Remote.com as its Employer of Record (EOR).Visa and work permit sponsorship are not available.
Background Check:
Employment with HackerOne is contingent on successfully completing a background check.
Equal Employment Opportunity:
HackerOne is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability, veteran status, or any other protected characteristic under applicable international, federal, state, or local laws. This policy applies to all employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Hiring decisions are based solely on qualifications, merit, and business needs at the time. For U.S.-based roles, pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered.