YesWeHack Hiring! Full Time Applications Security Analyst in - Ricebowl

YesWeHack | Singapore Office / APAC

Make the world safer, one vulnerability at a time!

At YesWeHack, we believe cybersecurity should be proactive, collaborative, and powered by the world’s best ethical hackers.

We are a global Offensive Security and Exposure Management platform, connecting organisations with a worldwide community of ethical hackers to find, validate, and fix vulnerabilities before attackers can exploit them. Our platform combines Bug Bounty, continuous security testing, and vulnerability management to help organisations secure their digital assets at scale.

Founded in 2015, YesWeHack is a European leader in Bug Bounty, with a strong international footprint including Paris, Singapore, Switzerland, and Canada. In APAC, we support major public- and private-sector organisations, including Singapore’s Government Bug Bounty Programmes.

We are now strengthening our APAC Applications Security Analyst team.

Your mission if you accept.

As a Security Analyst, you will be at the frontline of vulnerability defence.

You will review, reproduce, and assess security reports submitted by our global ethical-hacking community, then help clients understand the real business risk and remediate effectively. Your work will directly protect organisations across APAC and contribute to tools used by both our internal teams and the hacker community.

This is a hands-on role for someone who enjoys technical depth, clear communication, and turning raw findings into actionable security insight.

What you’ll do

• Review, reproduce, and assess vulnerability reports submitted by ethical hackers.
• Evaluate severity, impact, and exploitability across web applications and other exposed assets.
• Provide clear, practical remediation guidance to clients and help them strengthen their security posture.
• Act as a technical bridge between the ethical-hacking community, clients, and internal teams.
• Collaborate closely with Customer Success Managers to ensure a high-quality client experience.
• Contribute to the design, development, maintenance, and improvement of internal security and triage tools.
• Help improve the experience and effectiveness of our global hacker community.

What you’ll bring

• Strong ability to identify, reproduce, and assess web application vulnerabilities.
• Solid understanding of security fundamentals, including the OWASP Top 10.
• Hands-on experience with penetration-testing tools such as Burp Suite, SQLMap, fuzzers, and similar tooling.
• Proficiency in at least one of: Python, Go, or JavaScript.
• Excellent written and spoken English.
• A genuine passion for cybersecurity and continuous learning.
• Experience with CTFs, bug bounty platforms, or other hands-on InfoSec environments is a strong plus.
• Rigour, attention to detail, and adherence to security best practices.
• Strong interpersonal skills and a collaborative mindset.

Why join YesWeHack

• Work with one of the world’s leading Bug Bounty and Offensive Security platforms.
• Join a fast-growing APAC team supporting high-impact clients, including government and enterprise programmes.
• Work fully remotely while collaborating with an international security community.
• Contribute to both client-facing security work and internal tooling.
• Be part of a mission that has a direct, measurable impact on global cybersecurity.

Location

Singapore / APAC