Application Security Analyst

YesWeHack; Philippines; Remote; PHP 700,000 - 900,000; Full time

Benefits offered by this job

100% Remote (Philippines)

Collaborative international team

Exposure to global vulnerability cases

Job summary

YesWeHack is hiring an Application Security Analyst to join our APAC team. The role is fully remote and based in the Philippines, supporting our Singapore office.

You will review vulnerability reports from a global hacker community, validate findings, and help clients understand and remediate web security issues. Ideal candidates have experience with web vulnerabilities, OWASP Top 10, and tools like Burp Suite and SQLMap.

Qualifications

• Experience identifying and reproducing web application vulnerabilities.
• Strong knowledge of the OWASP Top 10 and common web security flaws.
• Participation in Capture The Flag (CTF) competitions is a plus.

Responsibilities

• Review, reproduce, and validate security vulnerability reports.
• Analyze findings and assess real-world business impact.
• Explain vulnerabilities to customers and provide remediation guidance.
• Collaborate with our global community of ethical hackers.
• Partner with APAC Customer Success team.
• Build and maintain internal security tools.

Skills

Web application vulnerabilities

OWASP Top 10

CTF participation

Hack The Box/TryHackMe

Explain technical concepts

Tools

Burp Suite

SQLMap

Penetration testing tools

Job description

Join YesWeHack's APAC Team and Help Make the Internet a Safer Place

Ready to turn your passion for hacking into real-world impact?

At YesWeHack, we're on a mission to make the digital world safer by connecting organizations with one of the world's largest communities of ethical hackers.

Founded in 2015, YesWeHack has become Europe's #1 Bug Bounty platform, trusted by organizations across the globe. Today, our community of 150,000+ ethical hackers helps businesses continuously identify and fix security vulnerabilities before attackers can exploit them.

With offices internationally, we're growing rapidly across APAC and we're looking for an Application Security Analyst based in the Philippines to join our fully remote team supporting our Singapore office.

If you enjoy breaking things (ethically), solving security puzzles, collaborating with talented hackers worldwide, and helping companies strengthen their defenses, we'd love to meet you.

What You'll Be Doing

Every day brings something different. You'll work with vulnerability reports submitted by our global ethical hacker community and help some of the world's leading organizations understand, validate, and remediate security issues.

Your mission (if you accept) includes:

• Review, reproduce, and validate security vulnerability reports
• Analyze technical findings and assess their real-world business impact
• Help customers understand vulnerabilities and recommend practical remediation
• Collaborate with our global community of ethical hackers
• Partner closely with our Customer Success team across APAC
• Build, improve, and maintain internal security tools that benefit both our team and the hacker community
• Continuously learn about emerging attack techniques and modern application security

What You'll Bring

You're someone who loves cybersecurity, not just as a job, but as a hobby.

Ideally, you have:

• Experience identifying and reproducing web application vulnerabilities
• Strong knowledge of the OWASP Top 10 and common web security flaws
• Hands-on experience with tools like:
• Burp Suite
• SQLMap
• Other penetration testing tools
• Excellent written and spoken English
• The ability to explain technical concepts clearly to both technical and non-technical audiences
• You've participated in Capture The Flag (CTF) competitions
• You're active on Hack The Box, TryHackMe, PortSwigger Academy, or similar platforms
• You've submitted Bug Bounty reports or enjoy vulnerability research
• You love learning, sharing knowledge, and staying curious

Why You'll Love Working Here

• 100% Remote – Work from anywhere in the Philippines
• Collaborate with an international team across APAC and Europe
• Make a real impact by helping secure organizations worldwide
• Work alongside one of the largest ethical hacking communities on the planet
• Learn every day through exposure to real vulnerabilities across diverse technologies
• Join a company where trust, transparency, collaboration, and innovation aren't just buzzwords, they're how we work

This role follows a 5-day work week supporting our APAC operations.

Please note: Your regular working days will include weekends (with scheduled weekdays off), so flexibility is important.

You're curious. You enjoy solving complex problems. You thrive in collaborative environments. You care about making technology safer.

Most importantly, you're excited about helping shape the future of offensive security while working with an incredible global team.

If that sounds like you, we'd love to hear from you.