About this role
HackerOne seeks an AI Product Manager to develop Agentic Vulnerability Elimination (AVE), which combines AI agents with human triage and security expertise to validate, prioritize, and remediate vulnerabilities at scale. The role reports to the Principal Product Manager for AVE and works with Pune-based triage and offensive security teams and product development teams in India, the Netherlands, and the U.K.
Responsibilities
- Improve agent quality, performance, and cost across vulnerability validation, prioritization, exploitation, deduplication, and remediation, balancing model capabilities with operational workflows, customer outcomes, and engineering tradeoffs.
- Evolve the evaluation framework and agent harness, including scalable evaluation methods, quality gates, and feedback loops. Work with security researchers to validate exploitability and adversarially stress-test agent decisions against real-world attack scenarios.
- Translate triage and security workflows into scalable product capabilities. Partner with engineering, product, operations, and customer-facing teams; join customer calls with teams in EMEA and the US to gather feedback.
- Define product health metrics and experimentation frameworks, use evidence to prioritize improvements, and independently lead initiatives from problem definition through success metrics and execution planning.
Required qualifications
At least 5 years of product management experience, ideally with technical or AI/LLM products at high-growth technology or SaaS companies. Candidates need experience building products across engineering, design, and operations; hands-on work with LLM-based solutions, prompting, evaluations, and quality control; strong analytical and communication skills; and experience with distributed, asynchronous teams. Applicants must be based in Pune or willing to relocate and able to work there on a hybrid basis.
Preferred qualifications
A bachelor's degree in Computer Science, Engineering, or a related discipline; experience with agentic systems, evaluation pipelines, agent harnesses, or human-in-the-loop workflows; familiarity with cybersecurity, vulnerability management, DevSecOps, bug bounty, or penetration testing; experience with triage teams or security researchers; and SQL or light scripting.
Working conditions and compensation: The role follows a UK shift. The description calls it hybrid, although the location header says in-office and the listing labels it on-site. The description states INR 43–50 LPA, while the listing and structured salary state ₹30L–₹37.5L; equity is also offered. Listed benefits include insurance, retirement plans, paid holidays, unlimited PTO, parental leave, and an Employee Assistance Program, with eligibility varying by country. Visa or work-permit sponsorship is unavailable, and employment is contingent on a background check.