{"schemaVersion":"jobsearcher.job.v1","id":"cd7d43ad730adbc04d9f91a4","url":"https://jobsearcher.com/jobs/cd7d43ad730adbc04d9f91a4","canonicalUrl":"https://jobsearcher.com/jobs/cd7d43ad730adbc04d9f91a4","title":"Product Security Analyst","description":"HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024).\nHackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations.\nHackerOne Values\nHackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.\nProduct Security Analyst\n\nRemote Locations\nBoston, MA\nAustin, TX\nWashington, DC\nSeattle, WA\nSan Francisco Bay Area, CA\nPosition Summary\nHackerOne is a global leader in offensive security solutions. Our HackerOne Platform combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the software development lifecycle.\nAs a Product Security Analyst, you will join HackerOne’s Technical Services organization and work directly with some of the world’s most skilled security researchers to help customers identify and remediate impactful vulnerabilities. You will play a critical role in validating, reproducing, and communicating security findings across bug bounty and vulnerability disclosure programs while helping maintain a high-quality experience for both customers and hackers.\nAs we continue evolving our AI-powered offensive security platform, this role offers an opportunity to deepen technical expertise in web and mobile application security while collaborating with globally distributed teams and the broader hacker community.\nAt HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston MA, Austin TX, Washington DC, Seattle WA, or San Francisco Bay Area CA. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work.\nWhat You Will Do\nEvaluate vulnerability reports submitted by security researchers to determine validity, severity, exploitability, and business impact for HackerOne customers using Data-Driven Decision Making and established security frameworks such as CVSS.\nIndependently reproduce reported vulnerabilities across web and mobile applications, applying First Principles Problem Solving to validate findings, identify root causes, and clearly communicate impact.\nCollaborate directly with security researchers to gather missing information, clarify technical details, and improve report quality while maintaining clear and professional communication with customers.\nCreate concise, technically accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance.\nDemonstrate Change Agility by adapting to evolving customer environments, changing program scopes, emerging attack techniques, and shifting operational priorities.\nContribute to an AI-First approach by leveraging automation and AI-enabled workflows to improve operational efficiency, report analysis, and vulnerability triage quality.\nPartner cross-functionally with Technical Services teammates and customer-facing teams to ensure timely handling of vulnerabilities and a high-quality customer experience.\nProactively identify opportunities to improve internal processes, documentation, tooling, and triage workflows to enhance scalability and consistency across the Technical Services organization.\nNote: some weekend shifts will be required.\nMinimum Qualifications\n3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications.\nStrong technical understanding of common application security vulnerabilities, including the OWASP Top 10.\nExperience using security testing tools such as Burp Suite and familiarity with vulnerability scoring frameworks including CVSS.\nExcellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences.\nAbility and desire to work weekend shifts from time to time.\nPreferred Qualifications\nExperience participating in bug bounty or vulnerability disclosure programs.\nExperience reproducing and validating vulnerabilities submitted by external researchers or customers.\nFamiliarity with scripting or automation used in security testing or operational workflows.\nDemonstrated ability to manage competing priorities and maintain operational excellence in a fast-paced, globally distributed environment.\nCompensation Band\nTier A (SF Bay Area) - $135,000 to $155,000\nTier B (all other locations) - $120,000 to $140,000 (+ equity)\n#LI-MH1\nJob Benefits:\nHealth (medical, vision, dental), life, and disability insurance*\nEquity stock options\nRetirement plans\nPaid public holidays and unlimited PTO\nPaid maternity and parental leave\nLeaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)\nEmployee Assistance Program\nEligibility may differ by country\nWe're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with Remote.com as our Employer of Record (EOR).\nVisa/work permit sponsorship is not available.\nEmployment at HackerOne is contingent on a background check.\nHackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.\nThis policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.\nFor US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.\nCompensation Range: $120K - $155K","company":"Hackerone","rawCompany":"hackerone","city":"Alameda","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-08-03T14:50:57.059Z","occupations":[],"industries":[],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Product Security Analyst","description":"HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024).\nHackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations.\nHackerOne Values\nHackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.\nProduct Security Analyst\n\nRemote Locations\nBoston, MA\nAustin, TX\nWashington, DC\nSeattle, WA\nSan Francisco Bay Area, CA\nPosition Summary\nHackerOne is a global leader in offensive security solutions. Our HackerOne Platform combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the software development lifecycle.\nAs a Product Security Analyst, you will join HackerOne’s Technical Services organization and work directly with some of the world’s most skilled security researchers to help customers identify and remediate impactful vulnerabilities. You will play a critical role in validating, reproducing, and communicating security findings across bug bounty and vulnerability disclosure programs while helping maintain a high-quality experience for both customers and hackers.\nAs we continue evolving our AI-powered offensive security platform, this role offers an opportunity to deepen technical expertise in web and mobile application security while collaborating with globally distributed teams and the broader hacker community.\nAt HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston MA, Austin TX, Washington DC, Seattle WA, or San Francisco Bay Area CA. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work.\nWhat You Will Do\nEvaluate vulnerability reports submitted by security researchers to determine validity, severity, exploitability, and business impact for HackerOne customers using Data-Driven Decision Making and established security frameworks such as CVSS.\nIndependently reproduce reported vulnerabilities across web and mobile applications, applying First Principles Problem Solving to validate findings, identify root causes, and clearly communicate impact.\nCollaborate directly with security researchers to gather missing information, clarify technical details, and improve report quality while maintaining clear and professional communication with customers.\nCreate concise, technically accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance.\nDemonstrate Change Agility by adapting to evolving customer environments, changing program scopes, emerging attack techniques, and shifting operational priorities.\nContribute to an AI-First approach by leveraging automation and AI-enabled workflows to improve operational efficiency, report analysis, and vulnerability triage quality.\nPartner cross-functionally with Technical Services teammates and customer-facing teams to ensure timely handling of vulnerabilities and a high-quality customer experience.\nProactively identify opportunities to improve internal processes, documentation, tooling, and triage workflows to enhance scalability and consistency across the Technical Services organization.\nNote: some weekend shifts will be required.\nMinimum Qualifications\n3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications.\nStrong technical understanding of common application security vulnerabilities, including the OWASP Top 10.\nExperience using security testing tools such as Burp Suite and familiarity with vulnerability scoring frameworks including CVSS.\nExcellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences.\nAbility and desire to work weekend shifts from time to time.\nPreferred Qualifications\nExperience participating in bug bounty or vulnerability disclosure programs.\nExperience reproducing and validating vulnerabilities submitted by external researchers or customers.\nFamiliarity with scripting or automation used in security testing or operational workflows.\nDemonstrated ability to manage competing priorities and maintain operational excellence in a fast-paced, globally distributed environment.\nCompensation Band\nTier A (SF Bay Area) - $135,000 to $155,000\nTier B (all other locations) - $120,000 to $140,000 (+ equity)\n#LI-MH1\nJob Benefits:\nHealth (medical, vision, dental), life, and disability insurance*\nEquity stock options\nRetirement plans\nPaid public holidays and unlimited PTO\nPaid maternity and parental leave\nLeaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)\nEmployee Assistance Program\nEligibility may differ by country\nWe're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with Remote.com as our Employer of Record (EOR).\nVisa/work permit sponsorship is not available.\nEmployment at HackerOne is contingent on a background check.\nHackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.\nThis policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.\nFor US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.\nCompensation Range: $120K - $155K","datePosted":"2026-08-03T14:50:57.059Z","dateModified":"2026-08-03T14:50:57.059Z","hiringOrganization":{"@type":"Organization","name":"Hackerone","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Alameda","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"cd7d43ad730adbc04d9f91a4"},"url":"https://jobsearcher.com/jobs/cd7d43ad730adbc04d9f91a4"}}