Application Security Specialist

February 6

Apply Now

Get a free AI resume review

Xsolla

WebsiteLinkedInAll Job Openings

Xsolla's video game business engine helps game developers and publishers operate more efficiently and sell more games.

game payments • local payment solutions • online game monetization • microtransactions • in-game payment solutions

201 - 500

Description

• The Xsolla Team is looking for a passionate Application Security Specialist to work remotely in one of these countries: Serbia, Montenegro, Indonesia, Thailand, and Cyprus. We need a professional who knows and likes to solve the company's information issues. • Seek and investigate vulnerabilities in the company's products • Collaborate with product development, information technology, and management • Participate in security assessments of service architecture • Develop and conduct training events for developers • Participate in the management of the Bug Bounty program • Assist developers in vulnerability mitigation according to agreed SLAs • Maintain, develop and automate SDLC practices • Assist in implementing security code review process • Participate in the selection and implementation of new information security systems • Participate in information security incident investigations

Requirements

• At least 3 years of relevant experience • Familiar with web application attacks, how to exploit them, and defense techniques • Experienced in doing penetration testing in PHP and Javascript • Understand the difference between threat and risk, and are familiar with vulnerability assessment • Understand the principles of networking and how web applications work • Are familiar with BurpSuite/OWASP ZAP etc • Familiar with the languages and frameworks for developing modern web applications • Familiar with manual and automated application security analysis tools • Familiar with SDLC • Verbal communication in English is easy

Benefits

• Convenient work tools: Latest Mac workplaces + additional hardware to make you more effective at work • Google Chat, Gmail, Google Drive, Confluence, Jira, GitLab • Professional growth: Free training and participation in specialized conferences • Rich knowledge exchange within the company