{"id":103409,"url":"https://alion.io/job/xsolla-security-engineer","title":"Security Engineer","company":{"id":2375,"name":"Xsolla","domain":"xsolla.com","url":"https://alion.io/company/xsolla","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":74,"open_postings":181,"ghost_share":0.354,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":70,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Baku, Azerbaijan"],"countries":["AZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":64000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"PHP","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"CockroachDB","optional":true},{"name":"ISO 27001","optional":true},{"name":"Linux","optional":true},{"name":"MariaDB","optional":true},{"name":"NIST CSF","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-07-07T10:35:41Z","employer_posted_date":"2026-07-07","last_verified_at":"2026-10-16T18:04:45Z","board_verified":true,"closed_at":null,"days_open":101,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":100},"description":"ABOUT YOU\nXsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company.\nThis is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation.\nOur tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need.\nAs always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.\nABOUT US\nXsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.\nFor more information, visit xsolla.com.\nResponsibilities\nPerform Application Security Reviews - Conduct code reviews, run SAST/DASTand dependency scanning tools, and work with engineering to resolve findings.\n\nParticipate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process.\n\nHelp Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAMconfigurations to strengthen the security of our cloud and container environments.\n\nParticipate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager.\n\nPartner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions.\n\nIdentify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution.\n\nSupport Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts.\n\nWrite Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones.\n\nSupport Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed.\n\nWhat You Bring\nFoundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review.\nCloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM, networking, and container concepts.\n\nCode Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues.\n\nSecurity Tooling Familiarity - Has used or is familiar with SAST, DAST, or dependency scanning tools and understands how they fit into a development workflow.\n\nStrong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences.\n\nCollaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems.\n\nSelf-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team.\n\nNice to Have\nThreat modeling experience;\n\nHands-on Kubernetes or container security experience;\n\nInfrastructure security background - Linux, networking, vSphere/ESX;\n\nFamiliarity with NISTCSF, PCI, SOC 2, or ISO 27001 from a technical perspective;\n\nDetection engineering or incident response experience;\n\nExperience building security automation or internal tooling;\n\nRelevant certifications (OSCP, GWAPT, CKS, or similar hands-on certs).","description_format":"text","description_chars":4957,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Payment Processing & Gateways","Game Development"],"lifecycle":[{"event":"open","at":"2026-07-07T10:35:41Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.542,"p_room":0.44,"age_days":100,"expected_fill_days":70,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/xsolla-security-engineer","json_url":"https://alion.io/job/xsolla-security-engineer.json","meta":{"generated_at":"2026-10-16T21:08:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1957,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2375},"rest":"https://alion.io/mcp/rest/get_company?id=2375"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxsolla-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxsolla-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxsolla-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xsolla-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxsolla-security-engineer"}]}