Salary not disclosed
Check market pay for comparable Security Engineer roles before applying.
Role overview
Job description
-
Perform Application Security Reviews - Conduct code reviews, run SAST/DAST and dependency scanning tools, and work with engineering to resolve findings.
-
Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process.
-
Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments.
-
Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager.
-
Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions.
-
Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution.
-
Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts.
-
Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones.
-
Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed.
Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM, networking, and container concepts.
Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues.
Security Tooling Familiarity - Has used or is familiar with SAST, DAST, or dependency scanning tools and understands how they fit into a development workflow.
Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences.
Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems.
Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team.
-
Threat modeling experience;
-
Hands-on Kubernetes or container security experience;
-
Infrastructure security background - Linux, networking, vSphere/ESX;
-
Familiarity with NIST CSF, PCI, SOC 2, or ISO 27001 from a technical perspective;
-
Detection engineering or incident response experience;
-
Experience building security automation or internal tooling;
-
Relevant certifications (OSCP, GWAPT, CKS, or similar hands-on certs).
About this listing
- Source: Xsolla's official careers site (via Lever) · last confirmed on the source 29 Oct 2026
- Posted 7 Jul 2026
Jobiba does not charge job seekers. Never pay to apply or share OTPs, card or bank details.
What they are looking for
Skills & requirements
Department · Technology
Hiring company
Xsolla
Find out how you can launch, monetize and scale your video games worldwide, with no upfront costs, using Xsolla's comprehensive suite of tools and services.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
$350K/yr
$222.4K – $278K/yr
🔔 Get job alerts
New Security Engineer jobs in Baku, Azerbaijan, straight to your inbox.
No spam · Unsubscribe anytime