HackerOne

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com , General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. Senior Manager, AI Engineering Remote Location: Austin, TX; or Washington, DC Position Summary HackerOne is redefining how the world’s leading organizations manage cyber risk — and AI is at the center of that transformation. As Senior Manager, AI Engineering, you will own two of the most strategically important product surfaces in our platform: AI-Native Intelligence Dashboard — Transform our executive and analytical dashboard into an AI-first experience that helps customers derive maximum value from their HackerOne engagement. Think proactive risk insights, natural language querying, automated remediation prioritization, and measurable reduction in Mean Time to Remediate (MTTR). Payments & Monetization — Lead the team responsible for researcher payments and consumption-based billing, ensuring security researchers are paid reliably and HackerOne’s contract monetization engine runs cleanly at scale. You will lead the team of senior engineers, set technical direction, and ship AI-powered capabilities that customers can see, feel, and measure. This is a high-autonomy role with real product ownership and direct customer impact. Reflecting our Flexible Work philosophy, this is a remote role targeted for candidates within ~50 miles of Washington DC, Boston, or Austin, with in-office presence typically on Thursdays. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of the listed locations above. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. What You Will Do Success in this role will be accomplished by delivering on the responsibilities below in alignment with the Values and Principles that define how we work at HackerOne. Multiply Your Impact by leading, mentoring, and developing Engineering Managers and senior engineers, building scalable systems and practices that allow teams to deliver AI-powered solutions consistently and independently Own the Outcome for execution across multiple AI engineering teams, ensuring delivery commitments are met, dependencies are actively managed, and teams are accountable for customer-visible impact Drive an AI First approach to engineering by embedding AI-powered workflows, agentic systems, and responsible AI practices into how teams design, build, and operate products Practice Change Agility by guiding teams through evolving AI technologies, shifting priorities, and emerging security threats while maintaining clarity, momentum, and team health Apply First Principles Problem Solving to complex AI and product challenges, breaking problems down to fundamentals and designing durable, scalable solutions rather than short-term workarounds Leverage Data-Driven Decision Making to assess system performance, model quality, delivery outcomes, and operational health, using e

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com , General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. Senior Security Engineer, Identity and Access Management Remote Location: San Francisco, California, U.S. Seattle, Washington, U.S. Austin, Texas, U.S. Washington, D.C., U.S. Boston, Massachusetts, U.S. Position Summary At HackerOne, identity is at the heart of how we protect the data we are trusted with most, our customers' vulnerabilities. We are building our Identity and Access Management capability with an AI-first approach, focused on engineering and not administration alone. As a Senior Security Engineer, you will design and deliver the access models and the automation behind them, so that people and systems can access only the right data, at the right time, in the right way. This role operates across the full identity lifecycle, from onboarding and creation through change and removal, for people, service accounts, and AI agents alike. You will help scale what a small team can accomplish by embedding automation, intelligence, and AI into how access is granted, reviewed, and removed, working toward least privilege for humans and least agency for AI. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Austin TX, Seattle WA, Washington DC, San Francisco CA, or Boston MA, or within commuting distance of our London or Netherlands locations. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together, fostering collaboration, connection, and in-person moments that enrich our culture, while still preserving the benefits of remote work. What You Will Do Success in the Senior Security Engineer, Identity and Access Management role will be accomplished by delivering on the responsibilities below in alignment with the Values and Principles that define how we work at HackerOne: Own the identity lifecycle end to end, from onboarding and creation through change to removal, for people, service accounts, and AI agents alike, building the automation that grants entitlements on evidence of legitimate need and removes them seamlessly and automatically Design and build the access models on top of data classification, so that what an identity can reach follows from what the data is rather than from who asked Make time-bound access the default for critical data, so that the secure path is the easy path Engineer identity as code, keeping provisioning logic, entitlement policy, and access review rules in version control and under test across systems such as Okta, Lumos, and AWS IAM, applying First Principles Problem Solving rather than configuring by hand in consoles Build AI and LLM-powered tooling that makes access review and entitlement anomaly detection continuous rather than periodic, embedding AI First practices so unusual patterns surface when they happen rather than at audit, and decide where AI is trusted to carry an access decision and where a person still signs it off Bring non-human identities under the same discipline as human ones. Service acco

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com , General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing and has been named a Most Loved Workplace for Young Professionals (2024). HackerOne is at a pivotal inflection point in the security industry. Offensive security is no longer optional – it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world’s top organizations. HackerOne Values HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability. Product Security Analyst Remote Locations - Boston, MA - Austin, TX - Washington, DC - Seattle, WA - San Francisco Bay Area, CA Position Summary HackerOne is a global leader in offensive security solutions. Our HackerOne Platform combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the software development lifecycle. As a Product Security Analyst, you will join HackerOne’s Technical Services organization and work directly with some of the world’s most skilled security researchers to help customers identify and remediate impactful vulnerabilities. You will play a critical role in validating, reproducing, and communicating security findings across bug bounty and vulnerability disclosure programs while helping maintain a high-quality experience for both customers and hackers. As we continue evolving our AI-powered offensive security platform, this role offers an opportunity to deepen technical expertise in web and mobile application security while collaborating with globally distributed teams and the broader hacker community. At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Boston MA, Austin TX, Washington DC, Seattle WA, or San Francisco Bay Area CA. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together – fostering collaboration, connection, and in-person moments that enrich our culture – while still preserving the benefits of remote work. What You Will Do Evaluate vulnerability reports submitted by security researchers to determine validity, severity, exploitability, and business impact for HackerOne customers using Data-Driven Decision Making and established security frameworks such as CVSS. Independently reproduce reported vulnerabilities across web and mobile applications, applying First Principles Problem Solving to validate findings, identify root causes, and clearly communicate impact. Collaborate directly with security researchers to gather missing information, clarify technical details, and improve report quality while maintaining clear and professional communication with customers. Create concise, technically accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance. Demonstrate Change Agility by adapting to evolving customer environments, changing program scopes, emerging attack techniques, and shifting operational priorities. Contribute to an AI-First approach by leveraging automation and AI-enabled workflows to improve operational efficiency, report analysis, and vulnerability triage quality. Partner cross-functionally with Technical Services teammates and customer-facing teams to ensure timely handling of vulnerabilities and a high-quality customer experience. Proactively identify opportunities to improve internal processes, documentation, tooling, and triage workflows to