Reflections on my 5 years at HackerOne
Today marks 5 years at HackerOne for me. I joined in 2020 as a Product Security Analyst while I was still an undergrad student. I’m grateful to now be serving as a Team Lead (Technical Services).
A few reflections:
- None of this is solo. Good managers, patient teammates, and sharp hackers did more for my growth than any “self-made” narrative.
- Title changes are visible; real growth is not. It’s in how you listen, decide, and own mistakes.
- Luck is underrated. Being in a high-trust, high-talent environment at the right time matters more than we admit.
- "I don’t know" is not a weakness. It’s usually the start of the right conversation.
- As an Individual contributor, you optimize for being right. As a lead, you optimize for the team being effective. Very different job.
- Escalations and incidents expose culture fast. Blame travels down; responsibility travels up.
- Saying "no" clearly is kinder than saying "yes" and disappearing.
- Tools change every year. Principles - ownership, clarity, curiosity - don’t.
- If you stop learning, your experience is just 1 year repeated 5 times.
- Constraints are not excuses, they are design inputs for how you grow.
- Reading reports from hackers is a privilege, a free, continuous education from some of the sharpest minds on the internet.
- The hardest shift is from “How do I prove myself?” to “How do I make others successful?”.
- Calm execution during chaos beats heroic last-minute rescue every single time.
- Depth compounds. Understanding one concept end-to-end teaches you more than skimming ten.
- Feedback that makes you uncomfortable is usually the feedback you needed two months ago.
- High standards without empathy create fear. Empathy without standards creates mediocrity. You need both.
- You outgrow roles faster than you outgrow habits. Updating your habits is the real promotion.
- If everything is urgent, nothing is important. Prioritization is a leadership skill, not a calendar trick.
- Writing forces clarity. If you can’t explain it simply, you probably don’t understand it yet.
- Most “communication issues” are unasked questions and unspoken assumptions.
- Systems outlive heroes. Fix the system, don’t search for a savior.
- Being technically right and practically useless is still a miss.
- A 1% better process, repeated daily, beats a once-a-year “big transformation”.
- You can borrow context, but you can’t outsource judgment. That part you have to earn.
- Your manager sees some of the picture. Customers see another part. Hackers see yet another. Listen to all three.
- Imposter syndrome never fully leaves. You just learn to move with it instead of freezing because of it.
- Generosity with knowledge is not optional. Someone did it for you when you had nothing to trade.
- Gratitude is a strategy, not just a feeling. It keeps you curious, grounded, and willing to start at zero again.
- Stay hungry, very very hungry. The real hunger for growth can’t be fully satisfied, the moment it feels “enough,” it was never true hunger. The goalpost should keep moving, not out of insecurity, but out of a genuine desire to keep stretching what you can learn, build, and contribute.
Grateful for the people at HackerOne who took chances on me, challenged my thinking, and trusted me with more responsibility than I thought I was ready for.
An even bigger thanks to the hackers whose reports I’ve had the chance to read over all these years.
Five years in, still learning, still a work in progress :)