# Senior Security Engineer, Identity and Access Management at HackerOne

- Company: HackerOne
- What the company does: HackerOne combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the SDLC. HackerOne offers AI red teaming, crowdsourced security, bug bounty, vulnerability disclosure... Backed by NEA.
- Company website: https://www.hackerone.com/
- Type: Startups
- Level: Senior
- Location: Seattle
- Work setup: Remote
- Pay: $180K to $220K base salary per year (USD)
- Posted: 2026-09-25
- Apply by: 2026-11-09
- Apply: https://jobs.ashbyhq.com/hackerone/3a370481-0350-4267-b58b-8874ccecdaa3
- Page: https://www.1752.vc/careers/jobs/hackerone-senior-security-engineer-identity-and-access-management/

## About the role

At HackerOne, identity is at the heart of how we protect the data we are trusted with most, our customers' vulnerabilities. We are building our Identity and Access Management capability with an AI-first approach, focused on engineering and not administration alone. As a Senior Security Engineer, you will design and deliver the access models and the automation behind them, so that people and systems can access only the right data, at the right time, in the right way.

## What they're looking for

- 5+ years of experience in identity and access management, security engineering, or software engineering with substantial ownership of identity systems
- Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation
- Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce and Workday, including SCIM provisioning and group-driven entitlements
- Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials
- Strong software engineering fundamentals with proficiency in Python, Go, or a similar language, and hands-on use of AI and LLM tooling and agentic coding tools in production engineering work
- Identity work in a regulated sector such as financial services, healthcare, or government, and producing access control evidence for audit against requirements such as PCI DSS, HIPAA, SOC 2, or ISO 27001

Tags: Enterprise Data & AI