Product Security Analyst

About the Company

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems.

Responsibilities

• Evaluate assigned vulnerability reports submitted by hackers to determine validity, risk, and severity
• Collaborate with hackers to address missing information and educate community members
• Compose technical summaries for valid reports including impact, reproduction steps, and remediation advice
• Ensure clear and efficient communication between hackers and customers
• Independently reproduce reported vulnerabilities in a test environment
• Assess vulnerability findings based on program policies, scope, and impact

Requirements

• 3+ years of hands-on experience in security testing or ethical hacking on web and mobile applications
• Proven experience with vulnerability disclosure and bug bounty programs
• Experience assessing and validating security reports for open-source projects
• Proficiency in analyzing application architectures, trust boundaries, and request flows
• Skilled in reviewing proof-of-concepts and performing root-cause analysis
• Strong technical knowledge of OWASP Top 10
• Proficiency with security testing tools such as Burp Suite
• Experience using CVSS frameworks
• Excellent written and verbal communication skills
• Ability to work night shifts, weekends, and regular US business hours
• English fluency

Benefits

• Health (medical, vision, dental), life, and disability insurance
• Equity stock options
• Retirement plans
• Paid public holidays and unlimited PTO
• Paid maternity and parental leave
• Employee Assistance Program