Product Security Analyst

3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications.

Strong technical understanding of common application security vulnerabilities, including the OWASP Top 10.

Experience using security testing tools such as Burp Suite and familiarity with vulnerability scoring frameworks including CVSS.

Excellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences.

Ability and desire to work weekend shifts from time to time.

Experience participating in bug bounty or vulnerability disclosure programs.

Experience reproducing and validating vulnerabilities submitted by external researchers or customers.

Familiarity with scripting or automation used in security testing or operational workflows.

Demonstrated ability to manage competing priorities and maintain operational excellence in a fast-paced, globally distributed environment.

Tier A (SF Bay Area) - $135,000 to $155,000 (+ equity)

Tier B (all other locations) - $120,000 to $140,000 (+ equity)

#LI-MH1

Health (medical, vision, dental), life, and disability insurance

Equity stock options

Retirement plans

Paid public holidays and unlimited PTO

Paid maternity and parental leave

Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)

Employee Assistance Program

Eligibility may differ by country

We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with Remote.com as our Employer of Record (EOR).

Visa/work permit sponsorship is not available.

Employment at HackerOne is contingent on a background check.

HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.

This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.

For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.