Search Remote Jobs

Senior Application Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $140k - $160k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

Where this job comes from

Posted on Pax8's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of Pax8

Pax8

1001 - 5000 employees

💼 Consulting

🏪 Marketplace

☁️ SaaS

💰 $185M Venture Round on 2022-04

Consulting • Marketplace • SaaS

Pax8 is an AI-powered digital marketplace designed specifically for small businesses. It serves as a platform for partners and vendors, offering resources, professional services, and events tailored to help businesses grow and succeed. Pax8 emphasizes building security solutions while providing extensive support and learning opportunities through its Pax8 Academy and collaboration within its partner community.

📋 Description

• Partner with product areas, engineering leads, and architects to influence secure design and implementation • Lead practical threat modeling and turn risk insights into actionable engineering decisions • Perform manual code review, design review, and security testing • Own the vulnerability lifecycle across SAST, SCA, DAST, and secret-scanning tools • Tune and maintain security tooling in delivery pipelines and developer workflows • Create agentic tooling for vulnerability triage, deduplication, exploitability enrichment, and remediation guidance • Shape and validate guardrails for AI-assisted and agent-generated code • Reproduce vulnerabilities, shape remediation, and validate fixes with engineering teams • Represent security in architectural decisions and explain technical risks and tradeoffs • Mentor teammates and engineering security champions • Support penetration-testing findings, bug bounty triage, and security incidents • Help make application security more scalable, measurable, and useful to developers

🎯 Requirements

• Substantial application or product security experience, with a track record of partnering directly with software engineering teams • Deep practical capability in threat modeling and manual code review for web and microservice environments • Strong understanding of authorization, multi-tenant isolation, and business-logic vulnerabilities • Hands-on experience operating application security tooling for source-code analysis, dependency analysis, dynamic testing, and secret detection • Experience with configuration, tuning, pipeline integration, and finding triage for security tooling • Technical judgment to distinguish noisy security findings from exploitable risk and explain remediation clearly • Experience creating automation or engineering tooling for vulnerability management • Practical understanding of security risks in large language model and agentic applications, including prompt injection, unauthorized tool use, and potential data-exfiltration paths • Proficiency with at least one modern cloud-native programming language; familiarity with Kotlin and JavaScript/TypeScript and ability to read unfamiliar code • Working knowledge of Amazon Web Services, Kubernetes, containers, and infrastructure as code • Bonus depth in securing agentic applications, Model Context Protocol integrations, identity and authorization in multi-tenant SaaS environments, or transactional and financial systems • Must hold valid right to work in United States • Successful candidates must complete pre-employment ID verification, reference requests, and qualification checks

🏖️ Benefits

• 401(k) with Company Match • Medical, Dental & Vision Coverage • Employee Assistance Program (EAP) • Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance • Flexible Open PTO • Paid Sick Leave • Paid Parental Leave • RTD EcoPass (eligible Colorado-based employees) • Internal development hub • Learning & Development trainers • AI powered tools • Mentorship from “born in the cloud” mentors • Cross continent collaboration • Opportunities for career growth and advancement

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 2 hours ago

BCS365

51 - 200

🔒 Cybersecurity

🏢 Enterprise

💼 Consulting

Business Applications Engineer designing SharePoint, Power Platform, and AI automation solutions for BCS365 clients. Delivering integrations, migrations, analytics, and technical discovery.

🔥 18 hours ago

LUVE

1001 - 5000

🏭 Manufacturing

⚡ Energy

🔧 Hardware

Applications Engineer designing industrial refrigeration and cooling solutions for LU-VE Group’s U.S. operations. Supporting equipment selection, technical specifications, and customer projects.

🔥 18 hours ago

Parallel Works

11 - 50

🤖 Artificial Intelligence

☁️ SaaS

🏛️ Government

Senior HPC Applications Engineer supporting scientific and AI workloads on Parallel Works’ ACTIVATE platform. Building software stacks, enabling multi-node GPU jobs, and diagnosing performance and portability issues.

🕒 Yesterday

Distran

51 - 200

🏭 Manufacturing

Field Application Engineer training customers and providing technical support for Distran’s acoustic gas-leak sensors. Feeding field insights into sales, compliance, and product development.

🕒 Yesterday

Liftoff Mobile

501 - 1000

📣 Marketing

Application Security Engineer securing GenAI, cloud, and infrastructure systems. Liftoff powers AI-driven performance marketing for the mobile app economy.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok