Xsolla is hiring a
Application Security Specialist in Serbia

Summary

Xsolla is seeking a remote Application Security Specialist for their team in Serbia, Montenegro, Indonesia, Thailand, or Cyprus. The role involves investigating vulnerabilities, collaborating with teams, participating in security assessments, conducting training events, managing the Bug Bounty program, assisting developers, maintaining SDLC practices, implementing security code review process, and participating in information security incident investigations. Required qualifications include 3 years of relevant experience, familiarity with web application attacks, penetration testing, networking principles, BurpSuite/OWASP ZAP etc, manual and automated application security analysis tools, SDLC, verbal communication in English, and a salary range of $45,000 - $55,000 per year. Benefits include convenient work tools and professional growth opportunities.

Requirements

• At least 3 years of relevant experience
• Familiar with web application attacks, how to exploit them, and defense techniques
• Experienced in doing penetration testing in PHP and Javascript
• Understand the difference between threat and risk, and are familiar with vulnerability assessment
• Understand the principles of networking and how web applications work
• Are familiar with BurpSuite/OWASP ZAP etc
• Familiar with the languages and frameworks for developing modern web applications
• Familiar with manual and automated application security analysis tools
• Familiar with SDLC
• Verbal communication in English is easy

Responsibilities

• Seek and investigate vulnerabilities in the company's products
• Collaborate with product development, information technology, and management
• Participate in security assessments of service architecture
• Develop and conduct training events for developers
• Participate in the management of the Bug Bounty program
• Assist developers in vulnerability mitigation according to agreed SLAs
• Maintain, develop and automate SDLC practices
• Assist in implementing security code review process
• Participate in information security incident investigations

Benefits

• Convenient work tools: Latest Mac workplaces + additional hardware to make you more effective at work
• Professional growth: Free training and participation in specialized conferences, rich knowledge exchange within the company