HackerOne · 4 hours ago

Senior Technical Program Manager, Bug Bounty

United States

Full-time

Remote

Senior Level

6+ years exp

Maximize your interview chances

ComputerInternet

Culture & ValuesU.S. Citizen Only

Insider Connection @HackerOne

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Oversee the entire HackerOne bug bounty program, ensuring smooth operations and data-driven continuous improvement.

Maintain and update program scope, bounty table, and policies to align with evolving security needs.

Ensure timely triage and resolution of reported vulnerabilities, working closely with development teams.

Manage hacker relationships, fostering a positive and productive community.

Effectively communicate updates, trends, and metrics for the program to both internal and external stakeholders.

Use metrics to analyze program and vulnerability trends to proactively identify potential risks and implement preventive measures.

Reduce mediations and report backlog by streamlining processes and policies for the program, improving triage efficiency, and setting and enforcing quality standards for vulnerability submissions.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Technical Program ManagementBug Bounty ManagementSecurity VulnerabilitiesCVSS ScoringVulnerability Management WorkflowsData AnalysisBug Bounty Platforms

Required

6+ years of experience as Technical Program Manager or similar role in a security-focused organization.

Experience managing bug bounty programs or similar initiatives working with or managing hacker communities.

Strong understanding of common security vulnerabilities, CVSS scoring, and vulnerability management workflows.

Excellent communication and interpersonal skills, with the ability to effectively communicate with technical and non-technical stakeholders.

Must be based remotely in the US. HackerOne is a digital-first company. This model offers our employees flexibility in time and location. All employees must be able to work and excel in a remote environment.