Security Analyst

2 weeks ago

San Francisco, United States hackerone Full time

HackerOne is the global leader in human-powered security, harnessing the creativity of the world‘s largest community of security researchers with cutting-edge AI to protect your digital assets. The HackerOne Platform combines the expertise of our elite community and the most up-to-date vulnerability database to pinpoint critical security flaws across your attack surface. Our integrated solutions, including bug bounty, pentesting, code security audits, spot checks, and AI red teaming, ensure continuous vulnerability discovery and management throughout the software development lifecycle. Trusted by industry leaders such as Coinbase, General Motors, GitHub, Goldman Sachs, Hyatt, PayPal, and the U.S. Department of Defense, HackerOne was named a Best Workplace for Innovators by Fast Company in 2023 and a Most Loved Workplace for Young Professionals in 2024.

Position Summary

HackerOne is seeking a dynamic individual with a passion for Information Security to join our Technical Services team. As a Security Analyst, you will gain hands-on technical experience and exposure to some of the world‘s best hackers while delivering high-impact vulnerabilities to the top bug bounty programs in the industry.

This role requires excellent communication skills, intellectual curiosity and drive to acquire the technical skills you‘ll need to ensure every valid bug report is reproducible and provides value to HackerOne customers.

For AMER: This job reports to a Manager in-region and can be based anywhere within the United States or Canada.

What You Will Do

  • Evaluate assigned vulnerability reports submitted by hackers to determine the validity, risk and severity to HackerOne customers

  • Collaborate with hackers to address missing information from reports as well as educate the HackerOne community members when reports are invalid

  • Compose a technical summary for each valid report that includes clear and concise details regarding the impact, steps to reproduce and remediation advice

  • Ensure clear and efficient communication between hackers and customers

  • Proactively identify and solve issues, as well as accept and quickly respond to delegated work; as we are distributed, being able to win as a team to solve problems is critical to our success

  • Assess vulnerability findings and determine whether the submission is valid based on program policies, scope and impact.

  • Independently reproduce reported vulnerabilities in a test environment and compose a technical summary for valid findings.

Minimum Qualifications

  • Proven experience with vulnerability disclosure and bug bounty (experience managing a bug bounty program is a plus but not required)

  • Hands-on experience doing security testing or ethical hacking on web and mobile applications

  • Strong technical knowledge of OWASP top 10

  • Comfortable using security testing tools including Burpsuite

  • Excellent written and verbal communication skills

  • Experience using frameworks such as CVSS

  • Self-motivated and able to manage your time and energy output while maintaining a consistent and sustainable operational rhythm

  • English fluency

  • This role works on a weekday schedule from Monday-Friday.

  • Must be based remotely in US or Canada. HackerOne is a digital-first company. This model offers our employees flexibility in time and location. All employees must be able to work and excel in a remote environment.

Preferred Qualifications

  • Experience managing a bug bounty program

Compensation Bands:
Tier Guide

Tier A

$116K - $131K * Offers Equity

Tier B

$105K - $118K * Offers Equity

Tier C

$99K - $112K * Offers Equity

Canada

CA$80K - CA$90K * Offers Equity

#LI-Remote

#LI-HM1

We are a Circle Back Initiative Employer and commit to responding to every applicant.

We‘re committed to building a global team For certain roles outside the United States, U.K., and the Netherlands, we partner with Remote.com as our Employer of Record (EOR).

Employment at HackerOne is contingent on a background check.

HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.

This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.

For US based roles only: Pursuant to the San Francisco Fair Chance Ordinance, all qualified applicants with arrest and conviction records will be considered for the position.

HackerOne Values

HackerOne commits to maintaining a strong, inclusive culture built for our employees and our community of hackers. We are driven by our five core values. We recognize that our mission is bigger than us, and therefore act with integrity at all times. As a team, we believe that transparency builds trust so we default to disclosure in our communications. Each individual executes with excellence, creating an environment of greater alignment and greater autonomy. We win as a team and respect all people to empower everyone to learn from each other, innovate, and grow.

Compensation Range: $99K - $131K

  • Security Analyst

    1 month ago

    San Francisco, United States Abnormal Security Full time

    Job DescriptionJob DescriptionAbout The RoleWe are looking for a Security Analyst to join our frontline cybersecurity defense team. As a Security Analyst, you will be responsible for identifying, catching, and preventing email fraud by efficiently handling a high volume of requests and applying policies. About YouDetail-oriented and passionate about...

  • Security Analyst

    1 month ago

    San Francisco, United States Abnormal Security Full time

    Job DescriptionJob DescriptionAbout The RoleWe are looking for an Overnight Security Analyst to join our frontline cybersecurity defense team. As a Security Analyst, you will be responsible for identifying, catching, and preventing email fraud by efficiently handling a high volume of requests and applying policies.About YouDetail-oriented and passionate...

  • Lead Security Analyst

    3 weeks ago

    San Francisco, United States Optomi Full time

    Lead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...

  • Mainframe Security Analyst

    1 month ago

    San Francisco, United States Aloden, Inc. Full time

    Mainframe Security Analyst Location: San Francisco, CA 94103 (Hybrid - 3 days onsite, 2 days remote) Candidate Preference: Candidates located within 50-60 miles of San Francisco, CA Work Arrangement: Hybrid (3 days in the office, 2 days remote) Job Description: We are seeking a highly skilled Mainframe Security Analyst to protect our critical...

  • SOC Security Analyst III

    2 days ago

    San Francisco, United States BlueVoyant Full time

    SOC Security Analyst IIILocation: Hybrid in the Philippines Office (50% of the time)The shift will be 4 X 10: 8am – 6pm PHL, Sunday – Wednesday or Wednesday – SaturdayBlueVoyant is looking for Security Operations Center (SOC) Security Analyst III to help our global customers manage their IT security. You will be part of a fast-paced team that helps...

  • SOC Security Analyst III

    2 days ago

    San Francisco, United States BlueVoyant Full time

    SOC Security Analyst IIILocation: Hybrid in the Philippines Office 50% of the timeThe shift will be 4 X 10: 8am – 6pm PHL, Sunday – Wednesday or Wednesday – SaturdayBlueVoyant is looking for Security Operations Center (SOC) Security Analyst III to help our global customers manage their IT security. You will be part of a fast-paced team that helps...

  • Lead Incident Response Security Analyst

    3 weeks ago

    San Francisco, United States Optomi Full time

    Lead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...

  • Cyber Security Threat Analyst

    31 minutes ago

    San Francisco, California, United States BlueVoyant Full time

    About the RoleWe are seeking a highly skilled Cyber Security Threat Analyst to join our team at BlueVoyant.Job SummaryThis is an exciting opportunity for a professional with expertise in cyber security threat analysis to work on preventing and defending against advanced threats. The successful candidate will be responsible for analyzing raw data, identifying...

  • SOC Security Analyst

    2 days ago

    San Francisco, United States Allied Universal Full time

    Allied Universal, North America’s leading security and facility services company, provides rewarding careers that give you a sense of purpose. While working in a dynamic, diverse and inclusive workplace, you will be part of a team that fuels a culture that will reflect in our communities and customers we serve. We offer medical, dental and vision coverage,...

  • Sr. Security Analyst

    1 month ago

    San Francisco, United States hims & hers Full time

    Hims & Hers Health, Inc. (better known as Hims & Hers) is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are revolutionizing telehealth for providers and their patients alike. Making personalized solutions accessible is of paramount importance to Hims & Hers and we are focused on...

  • Chief Financial Planning Analyst for High-Growth SaaS

    2 weeks ago

    San Francisco, California, United States Abnormal Security Full time

    About Abnormal SecurityAbnormal Security is a pioneering provider of AI-driven cybersecurity solutions, dedicated to safeguarding organizations from the most sophisticated cyber threats. Our mission is to empower businesses with cutting-edge security technologies and exceptional financial management.Job OverviewWe are seeking a skilled Chief Financial...

  • Security Analyst

    18 hours ago

    San Francisco, United States iRhythm Technologies, Inc. Full time

    Boldly innovating to create trusted solutions that detect, predict, and prevent disease.Discover your power to innovate while making a difference in patients‘ lives.iRhythm is advancing cardiac care...Join Us Now!At iRhythm, we are dedicated, self-motivated, and driven to do the right thing for our patients, clinicians, and coworkers. Our leadership is...

  • Optomi | Lead Security Analyst | san francisco, ca

    3 weeks ago

    san francisco, United States Optomi Full time

    Lead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...

  • Optomi | Lead Security Analyst | san francisco, ca

    3 weeks ago

    san francisco, United States Optomi Full time

    Lead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...

  • Cyber Security Analyst

    6 days ago

    San Francisco, CA, United States Bluestone Software Full time

    blueStone Recruiting is a national search firm with a focus of placing top Cyber Security talent from the Analyst level to CISO with prestigious organizations nationwide. Job Description Our client is seeking a Cyber Security Operations Analyst to support an operations team that serves a large government customer. The candidate will assist teammates and...

  • Optomi | Lead Incident Response Security Analyst | san francisco, ca

    3 weeks ago

    san francisco, United States Optomi Full time

    Lead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...

  • Optomi | Lead Incident Response Security Analyst | san francisco, ca

    3 weeks ago

    san francisco, United States Optomi Full time

    Lead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...

  • Security Operations Center

    7 days ago

    San Francisco, United States Unreal Gigs Full time

    Introduction: Do you thrive on being the first line of defense against cyber threats? Are you passionate about monitoring, detecting, and responding to security incidents in real-time? If you're a detail-oriented professional who loves investigating and stopping cyberattacks, then our client has the perfect opportunity for you. We’re looking for a Security...

  • Senior Cyber Security Analyst

    2 months ago

    San Antonio, United States University Health Full time

    POSITION SUMMARY/RESPONSIBILITIES The Senior Cyber Security Analyst must have a deep understanding of information security protocols and a passion for protecting Community First Health Plans Inc. (Community First) healthcare data. In this role, the Senior Analyst will be instrumental in establishing and maintaining security standards across Community...

  • Security Operations Center Analyst

    4 months ago

    San Francisco, United States Cloudflare Inc Full time

    About UsAt Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world's largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without...