Junior Application Security Specialist

Xsolla is seeking a Junior Application Security Specialist to join their growing security team in Baku, Azerbaijan. This is a hands-on role focused on identifying, assessing, and remediating security vulnerabilities across products and infrastructure, offering a strong learning environment with exposure to real-world security challenges.

As a global commerce company specializing in the video game industry, Xsolla provides developers with tools to launch, grow, and monetize their games. They are trusted by a significant portion of the top-grossing games and operate as the merchant of record in over 200 geographies.

If you are curious, detail-oriented, and eager to develop expertise in application security, we encourage you to apply and grow with us.

Company Overview

Xsolla is a global commerce company dedicated to empowering video game developers. They offer a comprehensive suite of tools and services, including direct-to-consumer commerce, intelligent payments, and player engagement products, helping studios of all sizes fund, distribute, market, and monetize their games. Xsolla is committed to the future of gaming and unlocking growth for creators worldwide.

Quick Details

• Salary Range: Not Applicable
• Job Type: Full-time
• Qualifications: Not Specified
• Experience: Not Specified

Key Responsibilities

• Assess incoming bug bounty reports and scanner findings, evaluating validity and severity.
• Participate in security assessments of web applications and APIs, identifying and documenting risks.
• Document findings, reproduction steps, and remediation guidance for engineering teams.
• Participate in threat modeling sessions to identify trust boundaries, data flows, and attack surfaces.
• Monitor and operate SAST, DAST, and dependency scanning tooling.
• Review code for common vulnerability classes under the guidance of senior specialists.
• Stay current with security community developments, new vulnerability classes, and attack techniques.

Requirements

• Solid understanding of common web security vulnerability classes (OWASP Top 10, CSRF, XSS, SQL injection, etc.).
• Solid understanding of web application fundamentals (HTTP request/response, REST APIs, cookies, CORS).
• Hands-on experience with web application security testing tools like Burp Suite.
• Ability to reproduce vulnerabilities and write clear documentation including reproduction steps, proof of concept, and impact.
• Familiarity with foundational secure coding concepts (input validation, output encoding).
• Ability to read and follow code in languages like PHP, Python, JavaScript, or Go.
• Strong analytical thinking and clear written communication skills.
• Curiosity and initiative to investigate problems thoroughly.

Benefits

• A strong learning environment with exposure to real-world security challenges in a payment platform.
• Support from experienced security specialists to help you grow.
• Opportunity to work with cutting-edge tools and technologies in application security.
• Be part of a global commerce company at the forefront of the video game industry.
• Develop deep expertise in application security within a growing security team.