Remote Application Security Analyst - Vulnerability Triage

Yes We Hack; Manila; Remote; PHP 5,653,000 - 9,422,000; Full time

Job summary

YesWeHack is expanding its APAC team and seeks an Application Security Analyst for a full remote role. You will review vulnerability reports from our ethical hackers, triage findings, and guide clients on understanding and remedying vulnerabilities.

You will contribute to internal tool development to aid the team and the hacking community. Your duties include reproducing vulnerabilities, educating clients on remediation, and collaborating with the CSM team.

Qualifications

• Experience reviewing and reproducing web application vulnerabilities.
• positions in vulnerability triage and guidance preferred.
• Knowledge of the Top 10 OWASP security risks.
• ability to explain remediation strategies to clients.

Responsibilities

• Review, reproduce, and evaluate security vulnerabilities.
• Educate, explain, and provide remediation guidance to clients.
• Facilitate communication with the ethical hacker community.
• Collaborate with the Customer Success Manager department.
• Develop and improve security tools for internal and community use.

Skills

Vulnerability analysis

OWASP Top 10

English communication

Team collaboration

CTF participation

Tools

Burp Suite

SQLMap

Fuzzers

Python

Go

JavaScript

Job description

YesWeHack is expanding its APAC team and seeks an Application Security Analyst for a full remote role. You will review vulnerability reports from our ethical hackers, triage findings, and guide clients on understanding and remedying vulnerabilities.

You will contribute to internal tool development to aid the team and the hacking community. Your duties include reproducing vulnerabilities, educating clients on remediation, and collaborating with the CSM team.