Application Security Analyst

🛡️ Application Security Analyst (Remote – Philippines)🛡️

Join YesWeHack's APAC Team and Help Make the Internet a Safer Place

Ready to turn your passion for hacking into real-world impact?

At YesWeHack, we're on a mission to make the digital world safer by connecting organizations with one of the world's largest communities of ethical hackers.

Founded in 2015, YesWeHack has become Europe's #1 Bug Bounty platform, trusted by organizations across the globe. Today, our community of 150,000+ ethical hackers helps businesses continuously identify and fix security vulnerabilities before attackers can exploit them.

With offices internationally, we're growing rapidly across APAC and we're looking for an Application Security Analyst based in the Philippines to join our fully remote team supporting our Singapore office.

If you enjoy breaking things (ethically), solving security puzzles, collaborating with talented hackers worldwide, and helping companies strengthen their defenses, we'd love to meet you.

🚀 What You'll Be Doing

Every day brings something different. You'll work with vulnerability reports submitted by our global ethical hacker community and help some of the world's leading organizations understand, validate, and remediate security issues.

Your mission (if you accept) includes:

• 🔍 Review, reproduce, and validate security vulnerability reports
• 🧠 Analyze technical findings and assess their real-world business impact
• 💡 Help customers understand vulnerabilities and recommend practical remediation
• 🤝 Collaborate with our global community of ethical hackers
• 🌏 Partner closely with our Customer Success team across APAC
• 🛠️ Build, improve, and maintain internal security tools that benefit both our team and the hacker community
• 📈 Continuously learn about emerging attack techniques and modern application security

💻 What You'll Bring

You're someone who loves cybersecurity, not just as a job, but as a hobby.

Ideally, you have:

• Experience identifying and reproducing web application vulnerabilities
• Strong knowledge of the OWASP Top 10 and common web security flaws
• Hands-on experience with tools like:
• Burp Suite
• SQLMap
• Fuzzers
• Other penetration testing tools
• Programming experience in Python, Go, or JavaScript
• Excellent written and spoken English
• The ability to explain technical concepts clearly to both technical and non-technical audiences

⭐ Bonus Points If...

• You've participated in Capture The Flag (CTF) competitions
• You're active on Hack The Box, TryHackMe, PortSwigger Academy, or similar platforms
• You've submitted Bug Bounty reports or enjoy vulnerability research
• You love learning, sharing knowledge, and staying curious

🌟 Why You'll Love Working Here

• 🌴 100% Remote – Work from anywhere in the Philippines
• 🌏 Collaborate with an international team across APAC and Europe
• 🎯 Make a real impact by helping secure organizations worldwide
• 🤝 Work alongside one of the largest ethical hacking communities on the planet
• 📚 Learn every day through exposure to real vulnerabilities across diverse technologies
• 💙 Join a company where trust, transparency, collaboration, and innovation aren't just buzzwords, they're how we work

🕒 Work Schedule

This role follows a 5-day work week supporting our APAC operations.

Please note: Your regular working days will include weekends (with scheduled weekdays off), so flexibility is important.

🎯 Who We're Looking For

You're curious. You enjoy solving complex problems. You thrive in collaborative environments. You care about making technology safer.

Most importantly, you're excited about helping shape the future of offensive security while working with an incredible global team.

If that sounds like you, we'd love to hear from you.

Come hack for good. Join YesWeHack.