Junior Application Security Specialist

About the role

Xsolla is seeking a Junior Application Security Specialist to join its growing security team. You will work hands‑on with senior specialists to identify, assess, and help remediate security vulnerabilities across the company’s payment platform and gaming services.

Key responsibilities

• Triaging security findings from bug bounty programs and automated scanners, evaluating severity and providing clear written summaries.
• Participating in vulnerability assessments of web applications and APIs, documenting risks in new and existing features.
• Writing security documentation, including reproduction steps and remediation guidance for engineering teams.
• Supporting threat‑modeling sessions to identify trust boundaries, data flows, and attack surfaces.
• Operating SAST, DAST, and dependency‑scanning tools, tracking findings and reducing noise.
• Conducting code reviews for common vulnerability classes under senior guidance, focusing on PHP, Python, and Go codebases.
• Staying current with security community developments, new CVEs, and emerging attack techniques.

Required profile

• Curious, detail‑oriented, and eager to develop deep expertise in application security.
• Comfortable asking the right questions and following through on remediation tasks.
• Strong learning mindset, ready to tackle real‑world security challenges in a payment platform at scale.

Required skills

• Understanding of OWASP Top 10 vulnerabilities (CSRF, XSS, IDOR, SQL injection, open redirect, authentication and session management weaknesses).
• Experience with SAST and DAST tools.
• Familiarity with dependency‑scanning solutions.
• Programming knowledge in PHP, Python, and Go.