Application Security Analyst

Yeswehack; Manila; Remote; PHP 600,000 - 1,100,000; Full time

Benefits offered by this job

100% Remote – Work from anywhere in 1

Collaborate with an international team

Learn every day through exposure to V&

YesWeHack perks

Job summary

YesWeHack in the APAC region is seeking an Application Security Analyst based in the Philippines to join our fully remote team supporting the Singapore office. You’ll assess vulnerability reports from our global hacker community, validate findings, and help clients remediate security issues.

You should be passionate about cybersecurity, with experience in web application security and OWASP Top 10. Strong English communication and teamwork across APAC and Europe are essential for success.

Qualifications

• Experience identifying and reproducing web application vulnerabilities.
• Strong knowledge of OWASP Top 10 and common web security flaws.
• Programming experience in Python, Go, or JavaScript.
• Excellent written and spoken English.

Responsibilities

• Review, reproduce, and validate vulnerability reports.
• Analyze findings and assess real-world business impact.
• Explain vulnerabilities to customers and recommend remediation.
• Collaborate with our global community of ethical hackers and APAC CS.
• Build and maintain internal security tools for the team.

Skills

Web app vulnerabilities

OWASP Top 10

Python/Go/JS

English communication

Tools

Burp Suite

SQLMap

Fuzzers

Penetration testing tools

Job description

Job Description:

Application Security Analyst (Remote – Philippines)

Join YesWeHack's APAC Team and Help Make the Internet a Safer Place

Ready to turn your passion for hacking into real-world impact?

At YesWeHack, we're on a mission to make the digital world safer by connecting organizations with one of the world's largest communities of ethical hackers.

Founded in 2015, YesWeHack has become Europe's #1 Bug Bounty platform, trusted by organizations across the globe.

Today, our community of 160k+ ethical hackers helps businesses continuously identify and fix security vulnerabilities before attackers can exploit them.

With offices internationally, we're growing rapidly across APAC and we're looking for an Application Security Analyst based in the Philippines to join our fully remote team supporting our Singapore office.

If you enjoy breaking things (ethically), solving security puzzles, collaborating with talented hackers worldwide, and helping companies strengthen their defenses, we'd love to meet you.

What You'll Be Doing

Every day brings something different. You'll work with vulnerability reports submitted by our global ethical hacker community and help some of the world's leading organizations understand, validate, and remediate security issues.

Your mission (if you accept) includes:

• Review, reproduce, and validate security vulnerability reports
• Analyze technical findings and assess their real-world business impact
• Help customers understand vulnerabilities and recommend practical remediation
• Collaborate with our global community of ethical hackers
• Partner closely with our Customer Success team across APAC
• Build, improve, and maintain internal security tools that benefit both our team and the hacker community
• Continuously learn about emerging attack techniques and modern application security

What You'll Bring

You're someone who loves cybersecurity, not just as a job, but as a hobby.

Ideally, you have:

• Experience identifying and reproducing web application vulnerabilities
• Strong knowledge of the OWASP Top 10 and common web security flaws
• Hands-on experience with tools like:
• Burp Suite
• SQLMap
• Fuzzers
• Other penetration testing tools
• Programming experience in Python, Go, or JavaScript
• Excellent written and spoken English
• The ability to explain technical concepts clearly to both technical and non-technical audiences

Bonus Points If...

• You've participated in Capture The Flag (CTF) competitions
• You're active on Hack The Box, TryHackMe, PortSwigger Academy, or similar platforms
• You've submitted Bug Bounty reports or enjoy vulnerability research
• You love learning, sharing knowledge, and staying curious

Why You'll Love Working Here

• 100% Remote – Work from anywhere in the Philippines
• Collaborate with an international team across APAC and Europe
• Make a real impact by helping secure organizations worldwide
• Work alongside one of the largest ethical hacking communities on the planet
• Learn every day through exposure to real vulnerabilities across diverse technologies
• Join a company where trust, transparency, collaboration, and innovation aren't just buzzwords, they're how we work

Work Schedule

This role follows a 5-day work week supporting our APAC operations.

Please note:

Your regular working days will include weekends (with scheduled weekdays off), so flexibility is important.

Who We're Looking For

You're curious. You enjoy solving complex problems. You thrive in collaborative environments. You care about making technology safer.

Most importantly, you're excited about helping shape the future of offensive security while working with an incredible global team.

If that sounds like you, we'd love to hear from you.

Come hack for good. Join YesWeHack.