Security Engineer

📋 Description

• Conduct code reviews using SAST/DAST tools
• Contribute to threat modeling sessions
• Harden GCP, Kubernetes, and IAM configurations
• Triage penetration test findings and remediate
• Review architectures for secure design decisions
• Track security findings through remediation lifecycle

🎯 Requirements

• Foundational AppSec knowledge of vulnerabilities and secure coding
• GCP/IAM experience; cloud networking & container concepts
• Go, Python, or PHP code literacy; read code
• Familiar with SAST, DAST, and dependency scanning
• Strong written communication across time zones; collaborative
• Self-directed with growth mindset; eager to learn

🎁 Benefits

• XSolla operates across multiple time zones for flexible collaboration
• Grow and shape a security program within a global team
• Direct, honest communication and ownership across teams