Applications Security Analyst

About the role

YesWeHack is a global offensive security and exposure management platform that connects organisations with ethical hackers to find, validate and fix vulnerabilities. It is strengthening its APAC Applications Security Analyst team. As a Security Analyst you will review, reproduce and assess vulnerability reports submitted by the ethical-hacking community, then help clients understand the real business risk and remediate effectively. The role is hands-on and suits someone who enjoys technical depth, clear communication and turning raw findings into actionable security insight.

Key responsibilities

• Review, reproduce and assess vulnerability reports submitted by ethical hackers.
• Evaluate severity, impact and exploitability across web applications and other exposed assets.
• Provide clear, practical remediation guidance to clients and help them strengthen their security posture.
• Act as a technical bridge between the ethical-hacking community, clients and internal teams.
• Collaborate closely with Customer Success Managers to ensure a high-quality client experience.
• Contribute to the design, development, maintenance and improvement of internal security and triage tools.
• Help improve the experience and effectiveness of the global hacker community.

Required profile

• Strong ability to identify, reproduce and assess web application vulnerabilities.
• Solid understanding of security fundamentals, including the OWASP Top 10.
• Excellent written and spoken English.
• A genuine passion for cybersecurity and continuous learning.
• Rigour, attention to detail, and adherence to security best practices.
• Strong interpersonal skills and a collaborative mindset.
• Experience with CTFs, bug bounty platforms or other hands-on InfoSec environments is a strong plus.

Required skills

• Hands-on experience with penetration-testing tools such as Burp Suite, SQLMap, fuzzers and similar tooling.
• Proficiency in at least one of: Python, Go or JavaScript.

What we offer

• Work with one of the world's leading Bug Bounty and Offensive Security platforms.
• A fast-growing APAC team supporting high-impact clients, including government and enterprise programmes.
• Full remote work while collaborating with an international security community.
• Client-facing security work alongside internal tooling, with a direct, measurable impact on global cybersecurity.