--- title: 'Security Engineer at Xsolla' canonical: 'https://feeny.ai/job/security-engineer-xsolla-baku-g67pb7pggsjg' type: 'job' last_seen: '2026-09-08' --- # Security Engineer at Xsolla - **Company:** Xsolla - **Location:** Baku, Azerbaijan - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-07-07 - **Last confirmed live:** 2026-09-08 - **Apply:** https://jobs.lever.co/xsolla/00caa189-33e6-4f65-84de-47145a3ebf39 ## Job description ## ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role. ## ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. ## Responsibilities - Perform Application Security Reviews - Conduct code reviews, run SAST/DAST and dependency scanning tools, and work with engineering to resolve findings. - Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. - Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. - Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. - Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. - Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. - Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. - Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. - Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. ## What You Bring - Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. - Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM, networking, and container concepts. - Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. - Security Tooling Familiarity - Has used or is familiar with SAST, DAST, or dependency scanning tools and understands how they fit into a development workflow. - Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. - Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. - Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. ## Nice to Have - Threat modeling experience; - Hands-on Kubernetes or container security experience; - Infrastructure security background - Linux, networking, vSphere/ESX; - Familiarity with NIST CSF, PCI, SOC 2, or ISO 27001 from a technical perspective; - Detection engineering or incident response experience; - ## Experience building security automation or internal tooling; - Relevant certifications (OSCP, GWAPT, CKS, or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution. ## About Xsolla ## Company Overview - **One-liner**: Xsolla is a global commerce and financial technology company that provides a comprehensive suite of tools and services for video game developers and publishers, including payments, distribution, marketing, and monetization solutions. - **Entity Type**: Private (Privately Held) - **Headquarters**: Sherman Oaks (Los Angeles), California, United States - **Founded**: 2005 - **Founders**: Aleksandr Agapitov (Founder & CEO) ## Core Business - **Industries**: Video game commerce, financial technology, payment processing, distribution, and capital markets for interactive entertainment. - **Target Customers**: B2B – game developers and publishers of all sizes, from indie studios to AAA enterprises. - **Mission**: "We bring opportunities together for the video game industry" – helping creators fund, launch, distribute, and monetize games globally. ## Products & Services - **Xsolla Payment Solutions**: Global payment orchestration supporting 1000+ payment methods, 130+ currencies, and 200+ geographies. Operates as the merchant of record. - **Xsolla Web Shop**: White-label direct-to-consumer storefronts that allow developers to sell games and in-game items with higher margins. - **Xsolla Launcher & Distribution**: Cross-platform game distribution tools and launcher solutions for PC and mobile. - **Xsolla Partnership Network**: Marketing and audience acquisition services. - **Xsolla Capital Markets Group (CMG)**: Institutional capital platform providing debt, credit, and special situations financing for game studios, supported by proprietary market intelligence and an LP/investor network. - **Xsolla Storefront** (in development): White-label Android game store designed for large-file distribution, download management, and multi-tenant theming. - **Xsolla Anti-Fraud & Compliance**: Risk management and compliance tools tailored to digital gaming transactions. ## Market Standing - **Valuation**: Not publicly available. - **Annual Revenue**: ~$100 million (source: LinkedIn data). - **Total Funding**: Not disclosed (private, bootstrapped/growth equity?). - **Notable Partners & Clients**: Valve, Twitch, Epic Games, PUBG Corporation, and thousands of other game developers (1,500+ mentioned on careers page). - **Growth Signals**: - 1,079 full-time employees (as of 2025; up ~22% YoY based on earlier LinkedIn data). - 16 global offices across Los Angeles, London, Berlin, Dubai, Kuala Lumpur, Tokyo, Beijing, and more. - 3,000+ direct-to-consumer web shops launched. - 258,343,632 Pay Station visits in 2024. - 180.5 million average daily developer API calls. - 99.98% platform uptime over the past 12 months. - Active expansion of Capital Markets Group with hires in New York, Middle East, and Singapore. ## Competitive Advantages - **Exclusive video game focus** – All products and services are built specifically for the games industry, unlike generic payment processors. - **Global merchant of record** – Handles tax, compliance, and fraud in 200+ territories, reducing friction for developers. - **Relationships with major platforms** – Deep integrations with Steam, Twitch, Epic Games Store, etc. - **Scale and reliability** – Proven ability to handle hundreds of millions of transactions annually with near-perfect uptime. - **Capital and investment arm** – Unique ability to provide financing to studios, creating stickiness and aligning incentives. ## Strategic Focus - Scaling the **Capital Markets Group** as an independent institutional platform serving the interactive entertainment ecosystem (debt, special situations, principal investments). - Building a **white-label Android game store** to capture mobile distribution and compete with traditional app stores. - Deepening **AI integration** across QA, testing, and hiring processes (Director of QA role explicitly mentions AI-assisted testing; AI used in recruitment). - Expanding presence in high-growth markets: **Japan** (CMO/VP Marketing role), Middle East, and Southeast Asia. ## Why Work Here - **Culture**: "We build from the inside out" – competitive salary, flexible time off, hybrid/remote options, health insurance, retirement programs, family leave, generous in-office amenities, disability and life insurance. - **Work Model**: Hybrid and remote available across global offices. - **Engineering Culture**: High ownership, modern stack (Android/Kotlin, large-file distribution, multi-tenant theming, CI/CD, cloud infrastructure). Engineers work on greenfield projects like the white-label game store. - **Growth Opportunities**: New hires in the Capital Markets group have "executive sponsorship, meaningful ownership, and the mandate to build a durable franchise." Rapidly scaling company with expanding teams. - **Global, diverse team**: Employees from 52+ countries; offices in 12 countries. ## Sources 1. [Xsolla Careers](https://xsolla.com/careers) 2. [LinkedIn – Xsolla Company Profile](https://linkedin.com/company/xsolla) 3. [Xsolla About Us](https://xsolla.com/about-us) 4. [Xsolla Culture & Values](https://xsolla.com/our-culture-and-values) 5. [Xsolla Jobs on Lever](https://jobs.lever.co/xsolla) ## Other roles at Xsolla - [Product / Web Designer, Partnerships](https://feeny.ai/job/product-web-designer-partnerships-xsolla-vladivostok-e3raqzzp1j2m) — Vladivostok, Russia - [Backend Engineer, Partnerships](https://feeny.ai/job/backend-engineer-partnerships-xsolla-vladivostok-b2wxwy4bnxxk) — Vladivostok, Russia - [Customer Success Manager, Partnerships](https://feeny.ai/job/customer-success-manager-partnerships-xsolla-vladivostok-a83dtrqt7e1j) — Vladivostok, Russia - [Senior QA Engineer - Web3 (](https://feeny.ai/job/senior-qa-engineer-web3-xsolla-baku-c7sgt8vq1ydp) — Baku, Azerbaijan - [Frontend developer](https://feeny.ai/job/frontend-developer-xsolla-russia-mds674bkxc1m) — Russia - [Senior QA Engineer - Web3 (Moscow, Perm, KL, Beijing, Shanghai)](https://feeny.ai/job/senior-qa-engineer-web3-moscow-perm-kl-beijing-shanghai-xsolla-moscow-9gz8gx2e95fq) — Moscow, Russia - [Senior QA Engineer - Web3](https://feeny.ai/job/senior-qa-engineer-web3-xsolla-perm-0z7bwxgdxq3w) — Perm, Russia - [IT Support Engineer](https://feeny.ai/job/it-support-engineer-xsolla-berlin-2hcz95sp2xzp) — Berlin, Germany - [Senior Database Administrator](https://feeny.ai/job/senior-database-administrator-xsolla-russia-yr8kmmts5g9c) — Russia - [Site Reliability Engineer](https://feeny.ai/job/site-reliability-engineer-xsolla-russia-mxwt76c389ny) — Russia