4 months ago
Baku, AzerbaijanMid Level
Responsibilities
- Conduct application security reviews through code review, SAST, DAST, and dependency scanning.
- Participate in threat modeling for new features and architecture changes.
- Help harden GCP, Kubernetes, IAM configurations, and container infrastructure.
- Triage penetration-test findings and coordinate remediation with engineering teams.
- Review architectures and advise on secure implementation patterns.
- Document, assess, and track security findings through remediation.
- Support investigation, containment, documentation, and root-cause analysis for security incidents.
- Write security advisories, best-practice documentation, and practical guidance for engineering teams.
- Support product security reviews and assessments for customer-facing services.
Requirements
- Understand common vulnerability classes, secure coding patterns, and meaningful code review practices.
- Have experience with GCP or a similar cloud provider and familiarity with IAM, networking, and container concepts.
- Read and review code in one or more of Go, Python, or PHP.
- Have familiarity with SAST, DAST, or dependency scanning tools and their development-workflow use.
- Communicate clearly in written documentation across time zones and audiences.
- Collaborate effectively with engineering teams and work independently in an evolving environment.
- Preferred qualifications include threat modeling, Kubernetes or container security, Linux, networking, vSphere/ESX, detection engineering, incident response, security automation, or internal tooling experience.
- Preferred familiarity includes NIST CSF, PCI, SOC 2, or ISO 27001 from a technical perspective.
- Relevant hands-on certifications such as OSCP, GWAPT, or CKS are preferred.
Tech Stack
Categories
About Xsolla
Xsolla builds commerce and monetization infrastructure for video games, offering payment processing, merchant-of-record services, storefronts, subscriptions, and anti-fraud tools for developers and publishers. The privately held company, founded in 2005 and headquartered in Sherman Oaks, California, supports direct-to-consumer sales and global tax/compliance across many regions and payment methods. Its platform targets studios from indie to AAA and powers distribution, marketing, and in-game purchases.