Product Security Analyst: AI-Driven Vulnerability Expert

DaParrot Ltd; Northern (KY); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Equity stock options

Retirement plans

Paid public holidays and unlimited PTO

Paid maternity and parental leave

Leaves of absence

Job summary

HackerOne seeks a Product Security Analyst to join our Technical Services team, validating and reproducing security findings in bug bounty and vulnerability disclosure programs. You will communicate clearly with customers and security researchers, helping maintain high-quality experiences while supporting web and mobile environments.

As AI-powered workflows evolve, you’ll deepen technical skills and collaborate with globally distributed teams, with some weekend shifts required to meet customer

Qualifications

• 3+ years of hands-on security testing, vulnerability research, or ethical hacking on web and mobile apps.
• Strong understanding of common app security vulnerabilities, including OWASP Top 10.
• Experience with security testing tools such as Burp Suite and familiarity with CVSS.

Responsibilities

• Evaluate vulnerability reports to determine validity, severity, exploitability, and business impact.
• Independently reproduce reported vulnerabilities across web and mobile apps and communicate findings clearly.
• Collaborate with researchers to gather details and improve report quality for customers.
• Create concise, technically accurate summaries with reproduction steps, impact, and remediation guidance.
• Adapt to evolving customer environments and changing program scopes.
• Leverage automation and AI-enabled workflows to improve triage quality and efficiency.
• Partner with Technical Services and customer-facing teams to ensure timely handling of vulnerabilities.
• Identify opportunities to improve internal processes, tooling, and triage workflows.
• Note: some weekend shifts will be required.

Skills

Security testing

OWASP Top 10

Burp Suite

CVSS

English

Tools

Burp Suite

Job description

HackerOne seeks a Product Security Analyst to join our Technical Services team, validating and reproducing security findings in bug bounty and vulnerability disclosure programs. You will communicate clearly with customers and security researchers, helping maintain high-quality experiences while supporting web and mobile environments.

As AI-powered workflows evolve, you’ll deepen technical skills and collaborate with globally distributed teams, with some weekend shifts required to meet customer