Application Security Analyst

Yeswehack; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

100% Remote

Job summary

YesWeHack is seeking an Application Security Analyst to join our APAC team from the Philippines in a fully remote role supporting our Singapore office. You will review vulnerability reports from our global hacker community, validate findings, and advise on practical remediation while collaborating with engineers and customers across APAC and Europe.

The role requires strong knowledge of web security, OWASP Top 10, and hands-on experience with tools like Burp Suite and SQLMap.

Qualifications

• Identifying and reproducing web application vulnerabilities.
• Strong knowledge of OWASP Top 10 and common web flaws.
• Experience with Burp Suite, SQLMap, and other pentesting tools.

Responsibilities

• Review, reproduce, and validate vulnerability reports.
• Analyze findings and assess business impact.
• Advise customers on remediation steps.
• Collaborate with a global community of ethical hackers.
• Develop and maintain internal security tools.

Skills

Web app vulnerabilities

OWASP Top 10

English proficiency

Penetration testing tools

Tools

Burp Suite

SQLMap

Job description

Join YesWeHack's APAC Team and Help Make the Internet a Safer Place

Ready to turn your passion for hacking into real-world impact?

At YesWeHack, we're on a mission to make the digital world safer by connecting organizations with one of the world's largest communities of ethical hackers.

Founded in 2015, YesWeHack has become Europe's #1 Bug Bounty platform, trusted by organizations across the globe. Today, our community of 150,000+ ethical hackers helps businesses continuously identify and fix security vulnerabilities before attackers can exploit them.

With offices internationally, we're growing rapidly across APAC and we're looking for an Application Security Analyst based in the Philippines to join our fully remote team supporting our Singapore office.

If you enjoy breaking things (ethically), solving security puzzles, collaborating with talented hackers worldwide, and helping companies strengthen their defenses, we'd love to meet you.

What You'll Be Doing

Every day brings something different. You'll work with vulnerability reports submitted by our global ethical hacker community and help some of the world's leading organizations understand, validate, and remediate security issues.

Your mission (if you accept) includes:

• Review, reproduce, and validate security vulnerability reports
• Analyze technical findings and assess their real-world business impact
• Help customers understand vulnerabilities and recommend practical remediation
• Collaborate with our global community of ethical hackers
• Partner closely with our Customer Success team across APAC
• Build, improve, and maintain internal security tools that benefit both our team and the hacker community
• Continuously learn about emerging attack techniques and modern application security

What You'll Bring

You're someone who loves cybersecurity, not just as a job, but as a hobby.

Ideally, you have:

• Experience identifying and reproducing web application vulnerabilities
• Strong knowledge of the OWASP Top 10 and common web security flaws
• Hands-on experience with tools like:
• Burp Suite
• SQLMap
• Other penetration testing tools
• Excellent written and spoken English
• The ability to explain technical concepts clearly to both technical and non-technical audiences
• You've participated in Capture The Flag (CTF) competitions
• You're active on Hack The Box, TryHackMe, PortSwigger Academy, or similar platforms
• You've submitted Bug Bounty reports or enjoy vulnerability research
• You love learning, sharing knowledge, and staying curious

Why You'll Love Working Here

• 100% Remote – Work from anywhere in the Philippines
• Collaborate with an international team across APAC and Europe
• Make a real impact by helping secure organizations worldwide
• Work alongside one of the largest ethical hacking communities on the planet
• Learn every day through exposure to real vulnerabilities across diverse technologies
• Join a company where trust, transparency, collaboration, and innovation aren't just buzzwords, they're how we work

This role follows a 5-day work week supporting our APAC operations.

Please note: Your regular working days will include weekends (with scheduled weekdays off), so flexibility is important.

You're curious. You enjoy solving complex problems. You thrive in collaborative environments. You care about making technology safer.

Most importantly, you're excited about helping shape the future of offensive security while working with an incredible global team.

If that sounds like you, we'd love to hear from you.