All jobs Remote Browse Skills

Search jobs collected from company career pages and public sources, in one place.

Built by Darshit Gajjar. Follow me:

Explore

All jobs Browse all categories Remote jobs Junior roles Senior roles

Popular

AI engineering Frontend Backend Data science

Legal

Disclaimer & Terms Job safety tips Report a job

Jobyssey is a job search engine. We are not the employer or a recruiter and do not verify listings. Jobs link to third-party sites and you apply there at your own risk. Never pay to apply for a job. Company names and trademarks belong to their owners. See the full disclaimer.

© 2026 Jobyssey

Home Jobs Remote Explore

Senior Application Security Specialist at Xsolla (USA), Inc. – Baku | Jobyssey

Home
Jobs
Security jobs
Senior Application Security Specialist

Senior Application Security Specialist

Xsolla (USA), Inc. · Baku · 5 months ago

Apply on company site

Before you apply

Jobyssey is a search engine. We don't post, own or verify this job and are not the employer or a recruiter. You'll apply directly on jobs.lever.co, under that site's terms.

Never pay to apply, for training or equipment, and never share bank details, ID documents or passwords before you've confirmed the employer is real.

Job safety tips Report this job Disclaimer

Work mode: Onsite
Seniority: Senior
Category: Security
Experience: 4+ years

api automation burp-suite ci-cd dast gcp javascript kubernetes oauth openid owasp php

Explore more jobs

Security jobs Remote Security jobs Senior jobs Onsite jobs

Own security initiatives end-to-end by identifying, assessing, and driving remediation of vulnerabilities across products and infrastructure. Lead AppSec work, set security standards, balance risk against business velocity, mentor junior specialists, and document findings clearly.

Responsibilities

Lead triage of bug bounty reports and scanner findings.
Set severity standards, escalation policies, and remediation SLAs.
Plan and conduct penetration tests of web applications, APIs, and services.
Define assessment scope and methodology.
Facilitate threat modeling sessions and identify trust boundaries, data flows, and attack surfaces.
Select, operate, and tune SAST, DAST, SCA, and secrets-scanning tooling.
Design noise-reduction and auto-triage workflows and integrate security gates into CI/CD.
Lead secure code reviews across PHP, Python, and Go codebases.
Define secure coding guidelines and review checklists.
Coach junior security specialists, run internal training, and champion security awareness.
Document findings, reproduction steps, and remediation guidance.
Set the security documentation standard for the team.

Requirements

4+ years in application security or a related security engineering role.
Expert knowledge of OWASP Top 10, SSRF, deserialization, request smuggling, OAuth/OIDC flaws, and business logic abuse.
Extensive hands-on Burp Suite and manual testing experience.
Ability to audit PHP, Python, Go, or JavaScript code.
Experience embedding security requirements, design review, CI/CD gates, and developer enablement into workflows.
Ability to assess severity and communicate risk to engineers and leadership.
Strong analytical thinking, ownership, and follow-through.
Nice-to-have experience with bug bounty programs, CTFs, Python or Go automation, GCP, Kubernetes security, advanced certifications, regulated environments, CVE credits, or security research.