Offensive Security Specialist

2 Months ago • 3 Years + • Cyber Security

Job Summary

Job Description

As an Offensive Security Specialist at Xsolla, you'll strengthen the company's security posture by conducting penetration testing in Blackbox and Greybox environments. You'll collaborate with developer teams, secure payment systems and core services, and contribute to security code reviews and SDLC automation. Responsibilities include identifying and investigating vulnerabilities, conducting security assessments, participating in bug bounty programs, and developing security training. Proficiency in Linux, PHP/JavaScript, OWASP, BurpSuite, and penetration testing is essential. The role requires strong collaboration skills and a proactive approach to addressing security challenges.

Must have:

Penetration testing (Blackbox/Greybox)
Linux, PHP/JavaScript, OWASP
BurpSuite/OWASP ZAP
Web application security expertise
Collaboration with developers
Vulnerability identification & mitigation

9 skills required

9 skills required for this role

Add these skills to join the top 1% applicants for this job

javascript

php

owasp-zap

linux

communication

software-development-lifecycle-sdlc

innovation

networking

ethical-hacking

Job Details

ABOUT YOU

Join Xsolla as an Offensive Security Specialist, where you’ll dive deep into our infrastructure, architecture, services, and tools to strengthen our security posture. This role offers an exciting opportunity to conduct rigorous penetration testing across Blackbox and Greybox environments. You’ll work closely with developer teams, contribute to the security of our payment systems, and help secure our core services. If you're passionate about Linux, PHP/JavaScript, OWASP, and BurpSuite, and have the drive to innovate security processes, we want to meet you!

ABOUT US

At Xsolla, we believe that great games begin as ideas, driven by the curiosity, dedication, and grit of creators around the world. Our mission is to empower these visionaries by providing the support and resources they need to bring their games to life. We are committed to leveling the playing field, ensuring that every creator has the opportunity to share their passion with the world.

Headquartered in Los Angeles, with offices in Berlin, Seoul, and beyond, we partner with industry leaders like Valve, Twitch, and Ubisoft to clear the paths for innovation in gaming. Our global reach spans over 200 geographies, offering more than 700 payment methods in 130+ currencies.

Longevity Opportunity Vision Enjoy the game!

RESPONSIBILITIES

Familiarize yourself with and master our current infrastructure, services, and tools.
Conduct thorough penetration testing of core services in Blackbox and Greybox environments.
Identify and investigate vulnerabilities in the company’s products, ensuring they are resolved according to SLAs.
Collaborate effectively with product development, IT, and management teams to ensure vulnerabilities are addressed.
Conduct security assessments of the company’s service architecture and offer improvement suggestions.
Engage in the study of payment systems’ technologies and operations.
Assist in the implementation of the security code review process and SDLC automation.
Actively participate in the Bug Bounty program and other information security incident investigations.
Regularly utilize tools like BurpSuite and various scanners for vulnerability testing and reporting.
Develop and conduct training sessions to educate developers on secure coding practices and vulnerability mitigation.
Take part in the selection and implementation of new information security systems and processes.

REQUIREMENTS

Proficiency in Linux, penetration testing (Blackbox/Greybox), PHP/JavaScript, OWASP, BurpSuite/OWASP ZAP.
At least 3 years of relevant experience in application security or a similar role.
Strong understanding of web application attacks, how to exploit them, and appropriate defense techniques.
Familiarity with manual and automated security analysis tools and experience with SDLC practices.
Experience in testing payment systems and an eagerness to learn about their operation and associated technologies.
Solid understanding of networking principles and how modern web applications work.
Demonstrated ability to work collaboratively with developer teams to mitigate vulnerabilities.
Initiative and innovative mindset to create and improve security processes.
Strong communication skills and a proactive approach to addressing security challenges.
Comfortable with verbal and written communication in English.

By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.

Longevity Opportunity Vision Enjoy the game!