Application Security Analyst (Philippines/Remote)

Yes We Hack; Manila; Remote; PHP 5,653,000 - 9,422,000; Full time

Job summary

YesWeHack is expanding its APAC team and seeks an Application Security Analyst for a full remote role. You will review vulnerability reports from our ethical hackers, triage findings, and guide clients on understanding and remedying vulnerabilities.

You will contribute to internal tool development to aid the team and the hacking community. Your duties include reproducing vulnerabilities, educating clients on remediation, and collaborating with the CSM team.

Qualifications

• Experience reviewing and reproducing web application vulnerabilities.
• positions in vulnerability triage and guidance preferred.
• Knowledge of the Top 10 OWASP security risks.
• ability to explain remediation strategies to clients.

Responsibilities

• Review, reproduce, and evaluate security vulnerabilities.
• Educate, explain, and provide remediation guidance to clients.
• Facilitate communication with the ethical hacker community.
• Collaborate with the Customer Success Manager department.
• Develop and improve security tools for internal and community use.

Skills

Vulnerability analysis

OWASP Top 10

English communication

Team collaboration

CTF participation

Tools

Burp Suite

SQLMap

Fuzzers

Python

Go

JavaScript

Job description

At YesWeHack, we are expanding our APAC team with dynamic and skilled professionals and are currently on the lookout for an Application Security Analyst (Full remote). In this role, you will be pivotal in handling vulnerability reports from our ethical hacking community. You’ll engage in thorough analysis, triage, and offer expert guidance to our clients on understanding, assessing, and remedying these vulnerabilities. Additionally, you will contribute to the creation and enhancement of internal tools, aiding both our team and the hacker community.

Key Responsibilities

As an Application Security Analyst you will participate in the qualification of vulnerability reports submitted by our community of ethical hackers, to its analysis and to support our clients in the assessment vulnerabilities in order to better understand the impacts and possible solutions. You will also participate in creating internal tools, as well as their maintenance and evolution for the benefit of our hackers’ community (https://yeswehack.github.io/).

Your main tasks will be as follows:

• Review, reproduce, and evaluate security vulnerabilities.
• Educate, explain, and provide insightful remediation advice to clients, enhancing their security posture.
• Facilitate effective communication with our ethical hacker community.
• Collaborate closely with the Customer Success Manager (CSM) department.
• Innovate and develop security tools for internal and community use.

Skillset

• Ability to find and reproduce web application vulnerabilities.
• Security fundamentals such as the Top 10 OWASP.
• Specific penetration tools such as Burp Suite, SQLMap, fuzzers, etc.
• Python, Go, or Javascript expertise
• Fluent English (spoken/written)

Work schedule: 5 days a week but working during the weekend.

• Passionate about cybersecurity, eager to apply your knowledge
• Hands-on experience, including participation in CTFs and Infosec platforms.
• Rigorous, adhering to best security practices.
• Team player with excellent interpersonal skills, ready to make a significant impact.
• A plus if you have Offensive Security Web Expertise (OSWE)