Remote AppSec Analyst: Safeguard the Web with Hackers

Yeswehack; Philippines; Remote; PHP 700,000 - 900,000; Full time

Benefits offered by this job

100% Remote (Philippines)

Collaborative international team

Exposure to global vulnerability cases

Job summary

YesWeHack is hiring an Application Security Analyst to join our APAC team. The role is fully remote and based in the Philippines, supporting our Singapore office.

You will review vulnerability reports from a global hacker community, validate findings, and help clients understand and remediate web security issues. Ideal candidates have experience with web vulnerabilities, OWASP Top 10, and tools like Burp Suite and SQLMap.

Qualifications

• Experience identifying and reproducing web application vulnerabilities.
• Strong knowledge of the OWASP Top 10 and common web security flaws.
• Participation in Capture The Flag (CTF) competitions is a plus.

Responsibilities

• Review, reproduce, and validate security vulnerability reports.
• Analyze findings and assess real-world business impact.
• Explain vulnerabilities to customers and provide remediation guidance.
• Collaborate with our global community of ethical hackers.
• Partner with APAC Customer Success team.
• Build and maintain internal security tools.

Skills

Web application vulnerabilities

OWASP Top 10

CTF participation

Hack The Box/TryHackMe

Explain technical concepts

Tools

Burp Suite

SQLMap

Penetration testing tools

Job description

YesWeHack is hiring an Application Security Analyst to join our APAC team. The role is fully remote and based in the Philippines, supporting our Singapore office.

You will review vulnerability reports from a global hacker community, validate findings, and help clients understand and remediate web security issues. Ideal candidates have experience with web vulnerabilities, OWASP Top 10, and tools like Burp Suite and SQLMap.