Senior Application Security Specialist

Xsolla
Baku
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Analytical thinking","Clear written communication","Curiosity","Initiative","Problem-solving"]

Join Xsolla's security team as a hands-on Junior Application Security Specialist working closely with senior engineers to identify, assess, and remediate security vulnerabilities across products and infrastructure. You’ll perform vulnerability triage, threat modeling, code reviews, and security testing, while developing deep expertise in application security within a payment platform operating at scale.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xsolla
Xsolla
4 months ago

Senior Application Security Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Join Xsolla's security team as a hands-on Junior Application Security Specialist working closely with senior engineers to identify, assess, and remediate security vulnerabilities across products and infrastructure. You’ll perform vulnerability triage, threat modeling, code reviews, and security testing, while developing deep expertise in application security within a payment platform operating at scale.
Location: Baku
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Entry level

Key Responsibilities

  • •Triage security findings, assess incoming bug bounty reports and scanner findings, and escalate with clear summaries.
  • •Assist with vulnerability assessments of web applications and APIs, documenting risks in new features and existing systems.
  • •Write clear security documentation including reproduction steps and remediation guidance for engineers.
  • •Support threat modeling sessions by identifying trust boundaries, data flows, and attack surfaces in system designs.
  • •Monitor and help operate SAST/DAST and dependency scanning tooling, tracking findings and remediation workflows.

Key Requirements

  • •Web Security Fundamentals with OWASP Top 10 and related weaknesses
  • •Web and Browser Fundamentals including HTTP, REST APIs, and CORS
  • •Hands-on experience with Burp Suite or similar security testing tools
  • •Ability to reproduce vulnerabilities, document steps, and write impact statements
  • •Familiarity with secure development concepts and reading code in PHP, Python, JavaScript, or Go
Experience:CybersecurityWeb securityPayments
Skills:Analytical thinkingClear written communicationCuriosityInitiativeProblem-solving
Tech Stack:Burp SuitePHPPythonJavaScriptGoRESTHTTPCORSSASTDASTCI/CDCloudGCPAWSAzureVulnerability documentation

Company Brief

Xsolla
Provides payment, billing, distribution and commerce solutions for video game developers and publishers, enabling in-game purchases, store infrastructure, fraud protection, and global payment processing to monetize games across platforms and regions.
Industry: Payments
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Sherman Oaks, Los Angeles, United States
Founded: 2005
WebsiteLinkedIn