Security Program Specialist II at Whoop

Boston, Massachusetts, United States

Apply Now

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Health Tech, WearablesIndustries

Requirements

2–4 years of professional experience in a security, privacy, compliance, or technical support role
Familiarity with security and privacy concepts such as vulnerability reporting, data protection, and regulatory compliance (SOC 2, GDPR, etc.)
Strong organizational skills with the ability to coordinate across multiple teams and stakeholders
Technical aptitude to perform basic analysis of security reports (e.g., reviewing proof-of-concept exploits, testing reproduction steps)
Excellent written and verbal communication skills, with the ability to explain technical issues to non-technical stakeholders
Interest in growing your career in either engineering (security/product) or information security (governance, risk, and compliance)
Prepared to relocate if necessary to work out of the Boston, MA office

Responsibilities

Triage and evaluate bug bounty submissions, escalating valid vulnerabilities to engineering for remediation and coordinating response
Perform level 1 troubleshooting for member-reported privacy or security concerns, ensuring issues are routed appropriately
Coordinate responses to auditor and regulator requests, including gathering SOC and compliance evidence
Partner with Product Security Engineers to organize and document threat modeling sessions, leaning on technical experts for deep technical details
Track and communicate the status of security issues, ensuring timely follow-up and resolution
Support process improvements to make WHOOP’s security and privacy operations more efficient
Develop, maintain, and track KPIs that measure the effectiveness of product security programs and provide visibility into team performance and risk reduction
Work closely with software teams across the department to adopt and rollout new tooling and security process changes

Skills

Key technologies and capabilities for this role

Bug Bounty TriageThreat ModelingSOC CompliancePrivacy TroubleshootingSecurity CoordinationKPI TrackingCompliance EvidenceSecurity Operations

Questions & Answers

Common questions about this position

Is this role remote or does it require working in an office?

This role is based in the WHOOP office in Boston, MA, and the successful candidate must be prepared to relocate if necessary to work out of the Boston office.

What experience is required for the Security Program Specialist II position?

Candidates need 2–4 years of professional experience in a security, privacy, compliance, or technical support role.

What key skills are needed for this role?

The role requires familiarity with security and privacy concepts, strong organizational skills for coordinating across teams, technical aptitude for basic security analysis, and excellent written and verbal communication skills.

What is the salary or compensation for this position?

This information is not specified in the job description.

What career growth opportunities are available in this role?

This role offers future growth paths into either security engineering or information security program management.

Whoop

Wearable fitness tracker with personalized insights

About Whoop

WHOOP offers a fitness membership that focuses on improving personal health and performance through a wearable device called the WHOOP Strap 3.0. This device continuously collects physiological data, including heart rate, sleep patterns, and recovery levels, to provide users with personalized recommendations on their daily activity, sleep needs, and readiness for performance. Unlike many competitors, WHOOP operates on a subscription model, where users pay a fee to access the membership, which includes the device and continuous insights through the WHOOP app. This model not only provides a steady revenue stream but also fosters a strong community among users, encouraging engagement through teams, challenges, and social features. The goal of WHOOP is to help users optimize their health and performance while minimizing injury risk.

Boston, MassachusettsHeadquarters

2012Year Founded

$393.7MTotal Funding

SERIES_FCompany Stage

Data & Analytics, HealthcareIndustries

501-1,000Employees

Benefits

Take Time Off: Time outside of the office is important for sleep, strain and recovery! Our PTO plan encourages members to take time off in order to come back refreshed.

Live a Healthy Lifestyle: Our competitive benefits package includes premium medical, dental, and vision coverage for employees and their dependents. Life and disability insurance are also available.

Feel Invested: In addition to a competitive base salary and 401k, you're eligible to receive stock options to share in the future of WHOOP. Work means more when you have personal stake. You have ownership in what we are building.

Eat Well: Keep hunger at bay with endless snacks in our fully stocked kitchen. Enjoy catered team lunches on Friday, and even a cold brew keg.

Know The Product: We want you to understand and experience the product firsthand. We offer you a WHOOP strap and membership at no cost.

Be Active: Take advantage of our office gym and on-site showers! WHOOP also offers a $500 yearly wellness perk for fitness classes and memberships.

Be Present: It’s important to be present when bringing home a new family member. Take care of your loved ones with 12 weeks paid parental leave, plus an additional 2 weeks to gradually return to work.

Love Where You Work: Sitting in the heart of Fenway, our beautiful office overlooks Fenway Park. A prime location for great food, not to mention catching a Sox game, too!

Work Hard, Play Harder: If we don't already have a club here that fits your lifestyle and interests, you're encouraged to start one. Share your passions with others at work, or discover new ones!

Risks

Increased competition from brands like Oura and Fitbit threatens market share.

Privacy concerns over data collection could lead to regulatory challenges.

Economic downturns may affect consumer willingness to pay subscription fees.

Differentiation

WHOOP offers 24/7 physiological data tracking with its WHOOP Strap 3.0.

The company provides personalized health insights for athletes and fitness enthusiasts.

WHOOP's subscription model includes a community aspect for user engagement.

Upsides

WHOOP's partnership with Cristiano Ronaldo boosts brand visibility and credibility.

Expansion into 56 markets enhances WHOOP's global presence and growth potential.

Collaborations with brands like Assos strengthen WHOOP's position in sports technology.

Land your dream remote job 3x faster with AI

Try Jobo Free