Application Security Analyst (Remote – Philippines)

About the role

We are looking for an Application Security Analyst to join our APAC team remotely from the Philippines. You will work with a global community of ethical hackers to identify, validate and help remediate security vulnerabilities in web applications for leading organisations.

Key responsibilities

• Review, reproduce and validate vulnerability reports submitted by ethical hackers.
• Analyse technical findings and assess their real‑world business impact.
• Explain vulnerabilities to customers and recommend practical remediation steps.
• Collaborate with the Customer Success team across APAC and with the global hacker community.
• Develop, improve and maintain internal security tools used by the team and the community.
• Stay up‑to‑date with emerging attack techniques and modern application security trends.

Required profile

• Passion for cybersecurity, demonstrated through personal projects or community involvement.
• Experience identifying and reproducing web application vulnerabilities.
• Strong knowledge of the OWASP Top 10 and common web security flaws.
• Excellent written and spoken English with the ability to explain technical concepts clearly.
• Team‑player attitude and willingness to collaborate across time zones.

Required skills

• OWASP Top 10 knowledge
• Burp Suite
• SQLMap
• Fuzzers
• Penetration testing tools
• Python programming
• Go or JavaScript programming

What we offer

• 100% remote work from anywhere in the Philippines.
• Opportunity to collaborate with an international team across APAC and Europe.
• Direct impact on securing organisations worldwide.
• Access to one of the largest ethical‑hacking communities.
• Continuous learning through exposure to real‑world vulnerabilities.