Applications Security Analyst

YesWeHack; Singapore; Remote; SGD 70,000 - 120,000; Full time

Job summary

YesWeHack is seeking an APAC Security Analyst to review vulnerability reports, reproduce findings, and assess risk for client assets across the region. You will translate findings into actionable remediation guidance and communicate clearly with clients and internal teams.

This hands-on role requires deep security knowledge and a passion for collaborative defense. You will work remotely with an international community, supporting major APAC clients including government and enterprise programmes.

Qualifications

• Strong ability to identify, reproduce and assess web vulnerabilities.
• Solid understanding of security fundamentals including OWASP Top 10.
• Hands-on experience with penetration testing tools such as Burp Suite, SQLMap, fuzzers.

Responsibilities

• Review, reproduce, and assess vulnerability reports submitted by ethical hackers.
• Evaluate severity, impact, and exploitability across web applications and exposed assets.
• Provide remediation guidance to clients to strengthen their security posture.
• Act as a technical bridge between ethical hackers, clients, and internal teams.
• Collaborate with Customer Success Managers to ensure a high-quality client experience.
• Contribute to design, development, maintenance, and improvement of internal security tools.
• Help improve the experience and effectiveness of our global hacker community.

Skills

Web vulnerabilities

OWASP Top 10

English fluency

Attention to detail

Bug bounty experience

Interpersonal skills

Tools

Burp Suite

SQLMap

Fuzzers

Job description

Make the world safer, one vulnerability at a time!

At YesWeHack, we believe cybersecurity should be proactive, collaborative, and powered by the world's best ethical hackers.

We are a global Offensive Security and Exposure Management platform, connecting organisations with a worldwide community of ethical hackers to find, validate, and fix vulnerabilities before attackers can exploit them. Our platform combines Bug Bounty, continuous security testing, and vulnerability management to help organisations secure their digital assets at scale.

Founded in 2015, YesWeHack is a European leader in Bug Bounty, with a strong international footprint including Paris, Singapore, Switzerland, and Canada. In APAC, we support major public- and private-sector organisations, including Singapore's Government Bug Bounty Programmes.

We are now strengthening our APAC Applications Security Analyst team.

Your mission if you accept.

As a Security Analyst, you will be at the frontline of vulnerability defence.

You will review, reproduce, and assess security reports submitted by our global ethical-hacking community, then help clients understand the real business risk and remediate effectively. Your work will directly protect organisations across APAC and contribute to tools used by both our internal teams and the hacker community.

This is a hands-on role for someone who enjoys technical depth, clear communication, and turning raw findings into actionable security insight.

What you'll do

• Review, reproduce, and assess vulnerability reports submitted by ethical hackers.
• Evaluate severity, impact, and exploitability across web applications and other exposed assets.
• Provide clear, practical remediation guidance to clients and help them strengthen their security posture.
• Act as a technical bridge between the ethical-hacking community, clients, and internal teams.
• Collaborate closely with Customer Success Managers to ensure a high-quality client experience.
• Contribute to the design, development, maintenance, and improvement of internal security and triage tools.
• Help improve the experience and effectiveness of our global hacker community.

What you'll bring

• Strong ability to identify, reproduce, and assess web application vulnerabilities.
• Solid understanding of security fundamentals, including the OWASP Top 10.
• Hands-on experience with penetration-testing tools such as Burp Suite, SQLMap, fuzzers, and similar tooling.
• Excellent written and spoken English.
• A genuine passion for cybersecurity and continuous learning.
• Experience with CTFs, bug bounty platforms, or other hands-on InfoSec environments is a strong plus.
• Rigour, attention to detail, and adherence to security best practices.
• Strong interpersonal skills and a collaborative mindset.
• Work with one of the world's leading Bug Bounty and Offensive Security platforms.
• Join a fast-growing APAC team supporting high-impact clients, including government and enterprise programmes.
• Work fully remotely while collaborating with an international security community.
• Contribute to both client-facing security work and internal tooling.
• Be part of a mission that has a direct, measurable impact on global cybersecurity.