Application Security Analyst (Philippines/Remote)

Taleez; France; Hybride; EUR 55 000 - 90 000; Plein temps

Résumé du poste

YesWeHack is expanding its APAC team and seeking an Application Security Analyst working fully remotely. You will handle vulnerability reports from our ethical hackers, analyze, triage, and guide clients on remediation while helping to build internal tools for the hacker community.

Key duties include reviewing vulnerabilities, educating clients on fixes, communicating with hackers, and collaborating with the CSM team.

Qualifications

• Experience in identifying and reproducing web application vulnerabilities.
• Knowledge of OWASP Top 10.
• Experience with Burp Suite, SQLMap, and fuzzers.
• Proficiency in Python, Go, or JavaScript.
• Fluent English.

Responsabilités

• Review, reproduce, and evaluate security vulnerabilities.
• Educate, explain, and provide remediation advice to clients.
• Facilitate effective communication with our ethical hacker community.
• Collaborate with the Customer Success Manager (CSM) department.
• Develop and maintain internal security tools.

Connaissances

Vulnerability analysis

OWASP Top 10

Penetration tools

Programming: Python/Go/JS

English fluency

Outils

Burp Suite

SQLMap

Fuzzers

Description du poste

At YesWeHack, we are expanding our APAC team with dynamic and skilled professionals and are currently on the lookout for an Application Security Analyst (Full remote). In this role, you will be pivotal in handling vulnerability reports from our ethical hacking community. You’ll engage in thorough analysis, triage, and offer expert guidance to our clients on understanding, assessing, and remedying these vulnerabilities. Additionally, you will contribute to the creation and enhancement of internal tools, aiding both our team and the hacker community.

Key Responsibilities

As an Application Security Analyst you will participate in the qualification of vulnerability reports submitted by our community of ethical hackers, to its analysis and to support our clients in the assessment vulnerabilities in order to better understand the impacts and possible solutions. You will also participate in creating internal tools, as well as their maintenance and evolution for the benefit of our hackers’ community (https://yeswehack.github.io/).

Your main tasks will be as follows:

• Review, reproduce, and evaluate security vulnerabilities.
• Educate, explain, and provide insightful remediation advice to clients, enhancing their security posture.
• Facilitate effective communication with our ethical hacker community.
• Collaborate closely with the Customer Success Manager (CSM) department.
• Innovate and develop security tools for internal and community use.

Skillset

• Ability to find and reproduce web application vulnerabilities.
• Security fundamentals such as the Top 10 OWASP.
• Specific penetration tools such as Burp Suite, SQLMap, fuzzers, etc.
• Python, Go, or Javascript expertise
• Fluent English (spoken/written)

Work schedule: 5 days a week but working during the weekend.

• Passionate about cybersecurity, eager to apply your knowledge
• Hands-on experience, including participation in CTFs and Infosec platforms.
• Rigorous, adhering to best security practices.
• Team player with excellent interpersonal skills, ready to make a significant impact.
• A plus if you have Offensive Security Web Expertise (OSWE)