Security Program Specialist, WHOOP

• 2–4 years of professional experience in a security, privacy, compliance, or technical support role
• Familiarity with security and privacy concepts such as vulnerability reporting, data protection, and regulatory compliance (SOC 2, GDPR, etc.)
• Strong organizational skills with the ability to coordinate across multiple teams and stakeholders
• Technical aptitude to perform basic analysis of security reports (e.g., reviewing proof-of-concept exploits, testing reproduction steps)
• Excellent written and verbal communication skills, with the ability to explain technical issues to non-technical stakeholders
• Interest in growing your career in either engineering (security/product) or information security (governance, risk, and compliance)
• You’re passionate about security and privacy, with a curiosity to dig into technical details while keeping the bigger picture in mind
• You’re highly organized and thrive at coordinating across multiple teams to keep security and privacy programs running smoothly
• You communicate clearly with both technical and non-technical stakeholders, making complex issues understandable
• You take ownership of your work, ensuring issues are followed through to resolution and always keeping member trust front and center
• You see security not just as risk reduction, but as a way to enable innovation and protect the member experience

Desirable

• As a Security Program Specialist II, you will help triage and coordinate incoming security and privacy requests, perform first-line technical analysis, and ensure timely resolution of issues
• This role is a great opportunity for someone who enjoys both the operational side of security and digging into technical details, with future growth paths into either security engineering or information security program management
• Triage and evaluate bug bounty submissions, escalating valid vulnerabilities to engineering for remediation and coordinating response
• Perform level 1 troubleshooting for member-reported privacy or security concerns, ensuring issues are routed appropriately
• Coordinate responses to auditor and regulator requests, including gathering SOC and compliance evidence
• Partner with Product Security Engineers to organize and document threat modeling sessions, leaning on technical experts for deep technical details
• Track and communicate the status of security issues, ensuring timely follow-up and resolution
• Support process improvements to make WHOOP’s security and privacy operations more efficient
• Develop, maintain, and track KPIs that measure the effectiveness of product security programs and provide visibility into team performance and risk reduction
• Work closely with software teams across the department to adopt and rollout new tooling and security process changes