Sr. Application Security Engineer
Pax8, Inc.2 days ago
Remote, United StatesSenior
Base Salary
$140k - $160k/yr
Responsibilities
- Partner with engineering leads and architects to influence secure design and implementation.
- Lead threat modeling, manual code review, design review, and application security testing.
- Own vulnerability evaluation, prioritization, remediation collaboration, and fix validation.
- Configure, tune, and integrate application security tooling into delivery pipelines and developer workflows.
- Build automation and agentic tooling for vulnerability triage, deduplication, exploitability enrichment, and remediation guidance.
- Develop guardrails for AI-assisted and agent-generated code and validate their effectiveness.
- Support penetration-testing findings, bug bounty triage, and security incidents.
- Mentor teammates and engineering security champions and represent security in architectural decisions.
Requirements
- Substantial application or product security experience partnering directly with software engineering teams.
- Deep practical capability in threat modeling and manual code review for web and microservice environments.
- Strong understanding of authorization, multi-tenant isolation, and business-logic vulnerabilities.
- Hands-on experience with source-code analysis, dependency analysis, dynamic testing, secret detection, pipeline integration, configuration, tuning, and finding triage.
- Experience creating automation or engineering tooling for vulnerability management; experience applying large language models or agents to security workflows is especially valuable.
- Practical understanding of security risks in large language model and agentic applications, including prompt injection, unauthorized tool use, and data-exfiltration paths.
- Proficiency with at least one modern cloud-native programming language and comfort reading Kotlin and JavaScript/TypeScript code.
- Working knowledge of AWS, Kubernetes, containers, and infrastructure as code.
- Bonus experience securing agentic applications, Model Context Protocol integrations, identity and authorization in multi-tenant SaaS environments, or transactional and financial systems.
- Ability to challenge designs constructively, explain tradeoffs, and work collaboratively toward solutions.
Benefits
- Remote United States work arrangement.
- $140,000-$160,000 compensation range.
- 401(k) with company match.
- Medical, dental, and vision coverage.
- Employee Assistance Program.
- Employer-paid life, AD&D, short-term disability, and long-term disability insurance.
- Flexible open PTO, paid sick leave, and paid parental leave.
- RTD EcoPass for eligible Colorado-based employees.
- Internal development hub, learning and development support, AI-powered tools, mentoring, and cross-continent collaboration.
Tech Stack
Categories
About Pax8, Inc.
Pax8 operates a cloud marketplace used by managed service providers and IT resellers to buy, provision, and bill SaaS and IaaS solutions, including Microsoft 365, security, backup, and infrastructure. It earns revenue as a distribution platform, offering automation and integrations for deployment and subscription management; founded in 2012 and headquartered in Greenwood Village, Colorado, it serves SMBs through a global network of MSP partners.