Security Analyst (Fluent French)

Yeswehack; Montreal (administrative region); Hybrid; CAD 70,000 - 100,000; Full time

Job summary

YesWeHack in Montréal is seeking a Security Analyst to join our growing North American team. You’ll work on our Bug Bounty platform, assess vulnerability reports with the hacker community, and help clients understand risks and mitigations.

You’ll collaborate with a small, tight-knit crew, split between on-site and remote days, and contribute to tooling that streamlines the disclosure process while staying ahead of evolving CVEs.

Qualifications

• Experience evaluating vulnerability reports and communicating risk.
• Ability to translate technical risks into actionable guidance for clients.
• Comfort working with a global ethical hacking community.

Responsibilities

• Assess and qualify vulnerability reports from the Bug Bounty program.
• Explain risks and recommended mitigations to clients in clear terms.
• Coordinate between ethical hackers and clients to close reports.
• Maintain efficient vulnerability workflow and triage processes.
• Contribute to tooling to improve the hacker experience.

Skills

Bug bounty platforms

Threat assessment

Client communication

Incident response

Tools

Burp Suite

CVSS

OWASP Top 10

Job description

YesWeHack – Hack the Good Way, Save the World (One Bug at a Time)

At YesWeHack, we’re not just another cyber company,we’re a full-blown movement. Our mission? Stop cyber attacks in their tracks with the power of our global Ethical Hackers Network (yep, that’s 125,000+ ethical hackers and counting).

Born in 2015 with a spark of rebellion and a whole lot of passion, we’ve grown into the #1 Bug Bounty platform in the EU and APAC. From Paris to Singapore, we’re helping companies protect their digital stuff by unleashing the skills of real-world hackers for good.

We’re flipping traditional cybersecurity on its head, using Bug Bounty programs to help organizations secure their exposed assets fast, agile, and with way more style than your average pentest report.

2 days on site and 3 days work from home.

Hey there, curious minds and cyber guardians!

YesWeHack is growing in North America, and we’re looking for a passionate Security Analyst to join our mission in Montréal. You'll be joining a tight-knit crew of two (soon to be three!) who live and breathe security, love collaboration, and never back down from a good challenge.

This isn’t your average job ad, because we’re not your average team.

You’ll dive headfirst into the heart of our bug bounty platform, working hand-in-hand with our global community of ethical hackers. You'll assess and qualify vulnerability reports, help clients understand risks and solutions, and even build tools to make the hacker experience even more awesome.

Your missions (should you choose to accept):

• Reproduce & document PoCs (Proof of Concepts) like a cyber Sherlock
• Assess the severity of vulnerabilities (using context, not just checklists)
• Chat with clients and help translate complex risks into human language
• Be the bridge between our ethical hackers and our clients
• Keep the vulnerability workflow running smoothly and efficiently
• Solid grasp of security basics (hello OWASP Top 10)
• You wield CVSS scoring like a pro
• You’re fluent in Burp Suite and other security tools

Even better if you also bring:

• Contributions to Open Source projects
• CTF or platform experience (TryHackMe, HackTheBox, etc.)
• A nose for the latest CVEs, exploits, and cyber trends

Profile

You're naturally curious, a lifelong learner, and love to dig into how systems tick (and how they can break ).

You’ve probably spent a few nights falling down rabbit holes on a Bug Bounty platform, reading CVE writeups, or trying to exploit a CTF challenge “just one more time” at 2 a.m.

You’re team-oriented, friendly, and love sharing your knowledge as much as learning from others. You respect the craft, and you bring that energy to your team.

We’re a group of passionate people who love what we do, and it shows. You’ll get to work on meaningful projects, collaborate with a global hacker community, and make the internet a safer place while having a great time doing it.

• Friendly, fun, tech-savvy team
• Real impact and ownership
• Opportunities to grow in a fast-moving, global company