---
title: 'Product Security Analyst at HackerOne'
canonical: 'https://feeny.ai/job/product-security-analyst-hackerone-washington-6aqkjc5da11c'
type: 'job'
last_seen: '2026-09-26'
---

# Product Security Analyst at HackerOne

- **Company:** HackerOne
- **Location:** Washington, DC
- **Compensation:** $120k–$155k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-18
- **Last confirmed live:** 2026-09-26
- **Apply:** https://jobs.ashbyhq.com/hackerone/379afa88-fca8-40ed-bf56-98aaae3d53d9/application

**Skills:** Web application security, Mobile application security, OWASP Top 10, Burp Suite, CVSS, Security testing, Vulnerability research, Ethical hacking, Scripting, Automation, Bug bounty participation, Vulnerability disclosure program experience

> Join HackerOne's Technical Services to validate, reproduce, and communicate security findings from bug bounty and vulnerability disclosure programs. You will evaluate vulnerability reports, collaborate with security researchers, and leverage AI-enabled workflows to improve operational efficiency and customer experie...

## Job description

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, [Crypto.com](http://Crypto.com), General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024).

HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations.

HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.

Product Security Analyst

Remote Locations

- Boston, MA
- Austin, TX
- Washington, DC
- Seattle, WA
- San Francisco Bay Area, CA

Position Summary HackerOne is a global leader in offensive security solutions. Our HackerOne Platform combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the software development lifecycle. As a Product Security Analyst, you will join HackerOne’s Technical Services organization and work directly with some of the world’s most skilled security researchers to help customers identify and remediate impactful vulnerabilities. You will play a critical role in validating, reproducing, and communicating security findings across bug bounty and vulnerability disclosure programs while helping maintain a high-quality experience for both customers and hackers. As we continue evolving our AI-powered offensive security platform, this role offers an opportunity to deepen technical expertise in web and mobile application security while collaborating with globally distributed teams and the broader hacker community.

At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston MA, Austin TX, Washington DC, Seattle WA, or San Francisco Bay Area CA. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. Please note: this role requires weekend work. You will work both Saturday and Sunday and ideally your days off are two of Tues, Wed, or Thurs.

## What You Will Do

- Evaluate vulnerability reports submitted by security researchers to determine validity, severity, exploitability, and business impact for HackerOne customers using Data-Driven Decision Making and established security frameworks such as CVSS.
- Independently reproduce reported vulnerabilities across web and mobile applications, applying First Principles Problem Solving to validate findings, identify root causes, and clearly communicate impact.
- Collaborate directly with security researchers to gather missing information, clarify technical details, and improve report quality while maintaining clear and professional communication with customers.
- Create concise, technically accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance.
- Demonstrate Change Agility by adapting to evolving customer environments, changing program scopes, emerging attack techniques, and shifting operational priorities.
- Contribute to an AI-First approach by leveraging automation and AI-enabled workflows to improve operational efficiency, report analysis, and vulnerability triage quality.
- Partner cross-functionally with Technical Services teammates and customer-facing teams to ensure timely handling of vulnerabilities and a high-quality customer experience.
- Proactively identify opportunities to improve internal processes, documentation, tooling, and triage workflows to enhance scalability and consistency across the Technical Services organization.
- Note: weekend work required (you will receive two days off in the week)

## Minimum Qualifications

- 3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications.
- Strong technical understanding of common application security vulnerabilities, including the OWASP Top 10.
- Experience using security testing tools such as Burp Suite and familiarity with vulnerability scoring frameworks including CVSS.
- Excellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences.
- Ability and desire to work weekends (with two days off during the week)

## Preferred Qualifications

- Experience participating in bug bounty or vulnerability disclosure programs.
- Experience reproducing and validating vulnerabilities submitted by external researchers or customers.
- Familiarity with scripting or automation used in security testing or operational workflows.
- Demonstrated ability to manage competing priorities and maintain operational excellence in a fast-paced, globally distributed environment.

## Compensation Band

Tier A (SF Bay Area) - $135,000 to $155,000 (+ equity) Tier B (all other locations) - $120,000 to $140,000 (+ equity)

## #LI-MH1

Job Benefits:

- Health (medical, vision, dental), life, and disability insurance*
- Equity stock options
- Retirement plans
- Paid public holidays and unlimited PTO
- Paid maternity and parental leave
- Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)
- Employee Assistance Program

*Eligibility may differ by country We're committed to building a global team! For certain roles outside the United States, India, the U.K., and the Netherlands, we partner with [Remote.com](https://remote.com/preemployment-faq) as our Employer of Record (EOR).

Visa/work permit sponsorship is not available.

Employment at HackerOne is contingent on a background check.

HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.

This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.

For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

## About HackerOne

## Company Overview
- **One-liner**: HackerOne provides a unified platform that combines AI and human insight to help organizations identify, manage, and remediate security vulnerabilities through bug bounty, pentesting, and vulnerability disclosure programs.
- **Entity Type**: Private
- **Headquarters**: San Francisco, California, USA (with hubs in eight global locations)
- **Founded**: 2012
- **Founders**: Michiel Prins, Jobert Abma, Alex Rice, Merlijn Boogaard

## Core Business
- Primary industry/industries: Cybersecurity (Vulnerability Management, Bug Bounty, Penetration Testing)
- Target customers: B2B serving Global 2000 companies, technology firms, government agencies, and open-source projects across all industries
- Mission or purpose statement: To empower the world to build a safer internet by making world-class security accessible to everyone [hackerone.com](https://www.hackerone.com/company)

## Products & Services
- **HackerOne Platform**: A unified SaaS platform that integrates bug bounty programs, vulnerability disclosure programs (VDPs), and penetration testing services. It leverages a global community of ethical hackers alongside AI-driven vulnerability detection.
- **Bug Bounty Programs**: Organizations pay rewards ("bounties") to ethical hackers for discovering and reporting security vulnerabilities. HackerOne manages the triage, validation, and remediation workflow.
- **Pentest as a Service (PTaaS)**: On-demand, managed penetration testing delivered by HackerOne's internal security experts, providing continuous testing beyond traditional point-in-time assessments.
- **Vulnerability Disclosure Program (VDP)**: A managed service for setting up a secure channel for external researchers to report security issues, reducing risk from unknown vulnerabilities.
- **HackerOne AI**: Proprietary AI tools and models that analyze vulnerability reports, reduce false positives (25% of findings are actionable), and accelerate remediation workflows [hackerone.com](https://www.hackerone.com/company).

## Market Standing
- **Valuation/Market Cap**: Approximately $2.9 billion (as of July 2025, based on secondary market reports; not officially confirmed)
- **Key Metric**: Total Funding - Over $160 million raised from notable venture capital firms.
- **Notable Investors/Partners**: Valor Equity Partners, EQT Partners, Benchmark, New Enterprise Associates (NEA), Dragoneer Investment Group, and others. Strategic partnerships include the "Internet Bug Bounty" (IBB) for core internet infrastructure [hackerone.com](https://www.hackerone.com/company).
- **Growth Signals**: Over 90% of customers trust HackerOne; 1,300+ companies use the platform; 600,000+ bugs have been discovered; the company reported a 210% increase in vulnerability reports in 2025, and has published millions in AI vulnerability reports [hackerone.com](https://www.hackerone.com/company).

## Competitive Advantages
- **Global Hacker Community**: The world's largest community of elite ethical hackers providing unmatched scale and diversity of testing perspectives.
- **Unified Platform + AI**: The only platform that unifies bug bounty, VDP, and PTaaS with proprietary AI, creating a "high signal, low noise" environment (25% of findings are actionable).
- **Deep Integration with Customers**: Offers $4M+ ROI per critical vulnerability before a breach occurs, making it a high-value, sticky platform for enterprise security teams.
- **Founding Member of IBB**: Unique credibility and access to securing core internet infrastructure and open source projects [hackerone.com](https://www.hackerone.com/company).

## Strategic Focus
- **AI-Powered Security**: Continuing to invest in AI that enhances vulnerability detection, triage, and remediation, while also using AI to generate new attack simulations.
- **Expanding Enterprise Adoption**: Growing its customer base among Global 2000 companies with PTaaS and managed services.
- **Community Growth and Engagement**: Deepening relationships with ethical hackers through events, training, and increased bounty opportunities.
- **Open Source & Infrastructure Security**: Maintaining its leadership role in securing critical internet infrastructure through the IBB and other community initiatives.

## Why Work Here
- **Mission-Driven Culture**: Employees ("Hackeronies") are united by a mission to build a safer internet. The company explicitly seeks candidates who are passionate about this mission [hackerone.com](https://www.hackerone.com/careers).
- **Flexible Work Philosophy**: HackerOne embraces a "Flexible Work" model with hubs in eight global locations, emphasizing collaboration and community while providing flexibility to perform at one's best [hackerone.com](https://www.hackerone.com/careers).
- **Core Values**: The company operates on three core values: Lead with integrity, Default to disclosure (transparency builds trust), and Execute with excellence [hackerone.com](https://www.hackerone.com/careers).
- **Diversity, Equity & Inclusion**: HackerOne is committed to creating an inclusive culture where diverse teams increase creativity, belonging, and performance. They have Employee Resource Groups (ERGs) to foster community.
- **Comprehensive Benefits**: Includes generous paid time off, parental leave (maternity, paternity, family caregiver), medical coverage, retirement plans, and compensation packages linked to long-term company success [hackerone.com](https://www.hackerone.com/careers).
- **Compensation Philosophy**: Pay is based on internal equity and local market data to remain competitive, with a system focused on job duties, experience, location, and tenure [hackerone.com](https://www.hackerone.com/careers).
- **Onboarding (HATCH) Program**: New hires join a cohort-based onboarding program that covers culture, product, and tools like "Working Genius" to help employees thrive [hackerone.com](https://www.hackerone.com/blog/recruitment-process-what-expect-when-you-apply-hackerone).

## Sources
1. [HackerOne About Us Page](https://www.hackerone.com/company)
2. [HackerOne Careers Page](https://www.hackerone.com/careers)
3. [HackerOne Recruitment Process Blog](https://www.hackerone.com/blog/recruitment-process-what-expect-when-you-apply-hackerone)
4. [HackerOne LinkedIn Profile](https://www.linkedin.com/company/hackerone)
5. [HackerOne Job Board](https://jobs.ashbyhq.com/hackerone)

## Other roles at HackerOne

- [Team Lead, Traige](https://feeny.ai/job/team-lead-traige-hackerone-india-3e6j5j92x30w) — India
- [Senior Security Engineer, Identity and Access Management](https://feeny.ai/job/senior-security-engineer-identity-and-access-management-hackerone-seattle-285cnk89d710) — Seattle, WA
- [Senior GTM Systems & Process Engineer](https://feeny.ai/job/senior-gtm-systems-process-engineer-hackerone-san-francisco-rnmd714nt75s) — San Francisco, CA
- [Director, Total Rewards, Systems & Analytics](https://feeny.ai/job/director-total-rewards-systems-analytics-hackerone-san-francisco-3thbf75wxrgg) — San Francisco, CA
- [Senior Data Engineer](https://feeny.ai/job/senior-data-engineer-hackerone-pune-vs1cv1rfn5wf) — Pune, India
- [Product Manager](https://feeny.ai/job/product-manager-hackerone-pune-7r4271ze96v9) — Pune, India
- [Associate Renewal Specialist](https://feeny.ai/job/associate-renewal-specialist-hackerone-pune-hhxcdz6gn9vw) — Pune, India
- [Senior Account Executive, EMEA Commercial](https://feeny.ai/job/senior-account-executive-emea-commercial-hackerone-london-0e4cct9b9258) — London, United Kingdom
- [Senior Manager, AI Engineering](https://feeny.ai/job/senior-manager-ai-engineering-hackerone-austin-3mchqzcd24a3) — Austin, TX
- [Senior Software Engineer, Platform](https://feeny.ai/job/senior-software-engineer-platform-hackerone-seattle-g2dvkph4dnqw) — Seattle, WA