Junior Application Security Specialist (Cybersecurity)

Location: On-site in Baku

Company

hirify.global is a large-scale payment platform providing specialized financial technology for the gaming industry.

What you will do

• Triage security findings from bug bounty reports and automated scanners, calculating severity and escalating issues.
• Perform security assessments of web applications and APIs to identify and document risks.
• Create precise security documentation, including reproduction steps and remediation guidance.
• Participate in threat modeling sessions to identify trust boundaries and attack surfaces.
• Operate and monitor SAST, DAST, and dependency scanning tooling to reduce noise and track findings.
• Review code in PHP, Python, and Go to identify common vulnerability classes.

Requirements

• Solid understanding of OWASP Top 10 and web security fundamentals (CSRF, XSS, IDOR, SQLi).
• Deep knowledge of HTTP request/response cycles, REST APIs, and browser security (SOP, Cookies, CORS).
• Hands-on experience with Burp Suite or similar web application security testing tools.
• Ability to read and follow logic in at least one language: PHP, Python, JavaScript, or Go.
• Strong analytical thinking and clear written communication skills.
• Must be based in Baku for on-site work.

Nice to have

• Active participation in bug bounty programs or CTF competitions.
• Basic scripting abilities in Python or Bash for automation.
• Familiarity with CI/CD pipelines and cloud environments (GCP, AWS, or Azure).
• Entry-level credentials or certifications such as eWPT, CEH, or PortSwigger Web Security Academy.

Culture & Benefits

• Strong learning environment with direct support and mentorship from experienced security specialists.
• Exposure to real-world security challenges within a high-scale production environment.
• A corporate culture that values directness, intellectual honesty, and thorough follow-through.
• Collaboration within a global team operating across multiple time zones.