Managing Counsel - Remote work

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world's largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Department of Defense, trust HackerOne to safeguard their digital ecosystems. With the industry shifting, HackerOne stands apart: we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world's top organizations.

HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.

Privacy Counsel

Remote Location: United Kingdom or USA (Boston, Washington DC, Austin, SF Bay Area, Seattle) Position Summary

HackerOne is seeking a Privacy Counsel to join our Privacy function to support the growing volume and complexity of global data protection, AI governance, and commercial contracting needs across the business. In this role, you will help accelerate product development, sales motions, internal procurement and cross-border data operations by providing thoughtful, practical, and globally relevant privacy support.

In addition to our legal and privacy teams, you will work closely with colleagues in our Product, Security, Compliance, Engineering, and Sales to deliver clear guidance, supporting privacy assessments, and review customer and vendor agreements to help us move quickly and responsibly as we grow. This is an individual contributor role ideal for a privacy lawyer who enjoys hands-on work, cross-functional collaboration, and applying structured legal thinking to emerging technologies.

Apply an AI-First approach by using AI tools responsibly to improve research quality, drafting efficiency, and privacy assessment workflows.

Demonstrate Change Agility by adapting quickly to evolving global privacy and AI regulations, adjusting guidance as new risks, tools, or requirements emerge.

Use First Principles Problem Solving to simplify complex privacy questions, clarify assumptions, and provide clear, structured recommendations.

Leverage Data-Driven Decision Making during DPIAs,and related assessments by grounding evaluations in evidence, criteria, and regulatory expectations.

Support the current Privacy function with global privacy assessments, including DPIAs, AI DPIAs, TIAs, LIAs, and other structured risk reviews.

Review new and existing product features, AI capabilities, and data practices as part of privacy-by-design, identifying risks and opportunities early in development.

Draft, review, and negotiate data processing agreements (DPAs), privacy terms, and commercial contracts to support global sales and procurement.

Maintain and update privacy contractual documentation and internal templates and policies.

Create and deliver internal training on privacy and AI governance.

Monitor evolving privacy laws, case law, AI governance frameworks, and regulatory trends, sharing key insights with stakeholders to maintain compliance and anticipate future requirements.

Qualified lawyer (UK or EU) with GDPR experience PQE 5+ years (mix of in-house or private practice experience). Strong knowledge of EU/UK GDPR and familiarity with global privacy laws (US, Middle East, Asia).

Experience drafting and negotiating data processing agreements and handling privacy-related issues in a global business context.

Proven ability to manage data breaches, regulatory notifications and privacy audits.

Excellent communication skills with the ability to simplify complex legal concepts for non-legal audiences.

Strong understanding of AI technologies, their ethical implications, and related legal frameworks.

Excellent analytical, problem-solving, and decision-making skills with the ability to provide practical and strategic legal advice.

Artificial Intelligence Governance Professional (AIGP) and other relevant certifications,

German language proficiency.

UK Tier: 105K to 115K * Offers Equity

Tier A (SF Bay Area): $180k to $215k * Offers Equity

Tier B (all other US locations): $160 to $190k * Offers Equity

#LI-Remote

Health (medical, vision, dental), life, and disability insurance*

Equity stock options

Retirement plans

Paid public holidays and unlimited PTO

Employee Assistance Program

*We're committed to building a global team! and the Netherlands, we partner with Remote.Visa/work permit sponsorship is not available.

HackerOne is an Equal Opportunity Employer in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, pregnancy, disability or veteran status, or any other protected characteristic as outlined by international, federal, state, or local laws.

This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship.