All jobs Remote Browse Skills

Search jobs collected from company career pages and public sources, in one place.

Built by Darshit Gajjar. Follow me:

Explore

All jobs Browse all categories Remote jobs Junior roles Senior roles

Popular

AI engineering Frontend Backend Data science

Legal

Disclaimer & Terms Job safety tips Report a job

Jobyssey is a job search engine. We are not the employer or a recruiter and do not verify listings. Jobs link to third-party sites and you apply there at your own risk. Never pay to apply for a job. Company names and trademarks belong to their owners. See the full disclaimer.

© 2026 Jobyssey

Home Jobs Remote Explore

Junior Application Security Specialist at Xsolla (USA), Inc. – Baku | Jobyssey

Home
Jobs
Security jobs
Junior Application Security Specialist

Junior Application Security Specialist

Xsolla (USA), Inc. · Baku · 3 months ago

Apply on company site

Before you apply

Jobyssey is a search engine. We don't post, own or verify this job and are not the employer or a recruiter. You'll apply directly on jobs.lever.co, under that site's terms.

Never pay to apply, for training or equipment, and never share bank details, ID documents or passwords before you've confirmed the employer is real.

Job safety tips Report this job Disclaimer

Work mode: Onsite
Seniority: Junior
Category: Security

api api-security authentication burp-suite dast javascript owasp php proof-of-concept python rest sast

Explore more jobs

Security jobs Remote Security jobs Junior jobs Onsite jobs

Join Xsolla's growing security team to identify, assess, document, and help remediate vulnerabilities across products and infrastructure while developing application security expertise under the guidance of senior specialists.

Responsibilities

Assess bug bounty reports and scanner findings, evaluate validity and severity, and escalate issues with clear summaries.
Participate in web application and API security assessments.
Identify and document risks in new and existing features.
Document findings, reproduction steps, proof of concept, and remediation guidance.
Participate in threat modeling and identify trust boundaries, data flows, and attack surfaces.
Help operate SAST, DAST, and dependency scanning tools and support remediation workflows.
Review code for common vulnerability classes under senior guidance.
Stay current with vulnerability classes, CVEs, and security techniques.

Requirements

Understanding of OWASP Top 10, CSRF, XSS, IDOR, SQL injection, open redirects, authentication, and session management weaknesses.
Understanding of HTTP, client-server architecture, REST APIs, same-origin policy, cookies, and CORS.
Hands-on experience with Burp Suite or similar web application security testing tools.
Ability to reproduce vulnerabilities and write clear reports with reproduction steps, proof of concept, and impact statements.
Familiarity with secure coding concepts including input validation, output encoding, parameterized queries, and least privilege.
Ability to read code in PHP, Python, JavaScript, or Go.
Analytical thinking, clear written communication, curiosity, and initiative.