Offensive Security Specialist
Job Summary
Job Description
As an Offensive Security Specialist at Xsolla, you'll strengthen the company's security posture by conducting penetration testing in Blackbox and Greybox environments. You'll collaborate with developer teams, secure payment systems and core services, and contribute to security code reviews and SDLC automation. Responsibilities include identifying and investigating vulnerabilities, conducting security assessments, participating in bug bounty programs, and developing security training. Proficiency in Linux, PHP/JavaScript, OWASP, BurpSuite, and penetration testing is essential. The role requires strong collaboration skills and a proactive approach to addressing security challenges.
Must have:
- Penetration testing (Blackbox/Greybox)
- Linux, PHP/JavaScript, OWASP
- BurpSuite/OWASP ZAP
- Web application security expertise
- Collaboration with developers
- Vulnerability identification & mitigation
9 skills required
Job Details
ABOUT YOU
Join Xsolla as an Offensive Security Specialist, where you’ll dive deep into our infrastructure, architecture, services, and tools to strengthen our security posture. This role offers an exciting opportunity to conduct rigorous penetration testing across Blackbox and Greybox environments. You’ll work closely with developer teams, contribute to the security of our payment systems, and help secure our core services. If you're passionate about Linux, PHP/JavaScript, OWASP, and BurpSuite, and have the drive to innovate security processes, we want to meet you!
ABOUT US
At Xsolla, we believe that great games begin as ideas, driven by the curiosity, dedication, and grit of creators around the world. Our mission is to empower these visionaries by providing the support and resources they need to bring their games to life. We are committed to leveling the playing field, ensuring that every creator has the opportunity to share their passion with the world.
Headquartered in Los Angeles, with offices in Berlin, Seoul, and beyond, we partner with industry leaders like Valve, Twitch, and Ubisoft to clear the paths for innovation in gaming. Our global reach spans over 200 geographies, offering more than 700 payment methods in 130+ currencies.
Longevity Opportunity Vision Enjoy the game!
RESPONSIBILITIES
- Familiarize yourself with and master our current infrastructure, services, and tools.
- Conduct thorough penetration testing of core services in Blackbox and Greybox environments.
- Identify and investigate vulnerabilities in the company’s products, ensuring they are resolved according to SLAs.
- Collaborate effectively with product development, IT, and management teams to ensure vulnerabilities are addressed.
- Conduct security assessments of the company’s service architecture and offer improvement suggestions.
- Engage in the study of payment systems’ technologies and operations.
- Assist in the implementation of the security code review process and SDLC automation.
- Actively participate in the Bug Bounty program and other information security incident investigations.
- Regularly utilize tools like BurpSuite and various scanners for vulnerability testing and reporting.
- Develop and conduct training sessions to educate developers on secure coding practices and vulnerability mitigation.
- Take part in the selection and implementation of new information security systems and processes.
REQUIREMENTS
- Proficiency in Linux, penetration testing (Blackbox/Greybox), PHP/JavaScript, OWASP, BurpSuite/OWASP ZAP.
- At least 3 years of relevant experience in application security or a similar role.
- Strong understanding of web application attacks, how to exploit them, and appropriate defense techniques.
- Familiarity with manual and automated security analysis tools and experience with SDLC practices.
- Experience in testing payment systems and an eagerness to learn about their operation and associated technologies.
- Solid understanding of networking principles and how modern web applications work.
- Demonstrated ability to work collaboratively with developer teams to mitigate vulnerabilities.
- Initiative and innovative mindset to create and improve security processes.
- Strong communication skills and a proactive approach to addressing security challenges.
- Comfortable with verbal and written communication in English.
By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.
Longevity Opportunity Vision Enjoy the game!
Similar Jobs
PwC
Kolkata, West Bengal, India (On-Site)
• 5 Months ago
PwC
Pune, Maharashtra, India (On-Site)
• 5 Months ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
Salesforce
San Francisco, California, United States (On-Site)
• 5 Months ago
PwC
Warsaw, Masovian Voivodeship, Poland (Hybrid)
• 5 Months ago
PwC
Neuilly-sur-Seine, Île-de-France, France (On-Site)
• 5 Months ago
PlayStation Global
Aliso Viejo, California, United States (Hybrid)
• 11 Hours ago
Canva
Sydney, New South Wales, Australia (Remote)
• 2 Weeks ago
ByteDance
San Jose, California, United States (On-Site)
• 3 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Baku, Azerbaijan
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
Palo Alto Networks
Riyadh, Riyadh Province, Saudi Arabia (On-Site)
• 4 Months ago
Barracuda Networks Inc
Bengaluru, Karnataka, India (On-Site)
• 3 Months ago
The Walt Disney Company
New York, New York, United States (On-Site)
• 21 Hours ago
PwC
Zürich, Zurich, Switzerland (On-Site)
• 5 Months ago
Thatgamecompany
Shanghai, Shanghai, China (On-Site)
• 12 Hours ago
ByteDance
Boston, Massachusetts, United States (On-Site)
• 21 Hours ago
Get notifed when new similar jobs are uploaded
About The Company
Xsolla's video game business engine helps game developers and publishers operate more efficiently and sell more games. Serving only the video game industry, Xsolla caters to businesses from indie to enterprise, with solutions that solve the complexities of distribution, marketing, and monetization so developers, publishers, and platform partners. Our goal is to increase your audience, sales and revenue.
Headquartered in Los Angeles, with offices worldwide, Xsolla operates as a merchant and seller of record for major gaming entities like Valve, Twitch, Ubisoft, Epic Games, and PUBG Corporation.
Get notified when new jobs are added by Xsolla
