Senior Application Security Engineer

Pax8

. Partner with product areas, engineering leads, and architects to influence secure design and implementation .

Posted 10/30/2026full-timeRemote • United StatesSenior💰 $140,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates substantial application security experience with a focus on threat modeling, manual code review, and vulnerability management. Proficient in integrating security tooling within development workflows and mentoring engineering teams on secure design practices.

Highest-signal resume keywords

Application Security ExperienceThreat ModelingManual Code ReviewSecurity Tooling IntegrationVulnerability Management Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingManual Code ReviewVulnerability ManagementAuthorization UnderstandingMulti-Tenant IsolationBusiness-Logic VulnerabilitiesCloud-Native Programming LanguageKotlinJavaScriptTypeScript

Soft Skills

Technical JudgmentMentoring

Tools & Technologies

SASTSCADASTSecret-Scanning ToolsAmazon Web ServicesKubernetesContainersInfrastructure as Code

Industry Keywords

Application SecuritySecurity TestingVulnerability LifecyclePenetration TestingBug Bounty Triage

Tech Stack

Tools & technologies

AWSCloudJavaScriptKotlinKubernetesTypeScript

About the role

Key responsibilities & impact

Partner with product areas, engineering leads, and architects to influence secure design and implementation
Lead practical threat modeling and turn risk insights into actionable engineering decisions
Perform manual code review, design review, and security testing
Own the vulnerability lifecycle across SAST, SCA, DAST, and secret-scanning tools
Tune and maintain security tooling in delivery pipelines and developer workflows
Create agentic tooling for vulnerability triage, deduplication, exploitability enrichment, and remediation guidance
Shape and validate guardrails for AI-assisted and agent-generated code
Reproduce vulnerabilities, shape remediation, and validate fixes with engineering teams
Represent security in architectural decisions and explain technical risks and tradeoffs
Mentor teammates and engineering security champions
Support penetration-testing findings, bug bounty triage, and security incidents
Help make application security more scalable, measurable, and useful to developers

Requirements

What you’ll need

Substantial application or product security experience, with a track record of partnering directly with software engineering teams
Deep practical capability in threat modeling and manual code review for web and microservice environments
Strong understanding of authorization, multi-tenant isolation, and business-logic vulnerabilities
Hands-on experience operating application security tooling for source-code analysis, dependency analysis, dynamic testing, and secret detection
Experience with configuration, tuning, pipeline integration, and finding triage for security tooling
Technical judgment to distinguish noisy security findings from exploitable risk and explain remediation clearly
Experience creating automation or engineering tooling for vulnerability management
Practical understanding of security risks in large language model and agentic applications, including prompt injection, unauthorized tool use, and potential data-exfiltration paths
Proficiency with at least one modern cloud-native programming language; familiarity with Kotlin and JavaScript/TypeScript and ability to read unfamiliar code
Working knowledge of Amazon Web Services, Kubernetes, containers, and infrastructure as code
Bonus depth in securing agentic applications, Model Context Protocol integrations, identity and authorization in multi-tenant SaaS environments, or transactional and financial systems
Must hold valid right to work in United States
Successful candidates must complete pre-employment ID verification, reference requests, and qualification checks

Benefits

Comp & perks

401(k) with Company Match
Medical, Dental & Vision Coverage
Employee Assistance Program (EAP)
Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
Flexible Open PTO
Paid Sick Leave
Paid Parental Leave
RTD EcoPass (eligible Colorado-based employees)
Internal development hub
Learning & Development trainers
AI powered tools
Mentorship from “born in the cloud” mentors
Cross continent collaboration
Opportunities for career growth and advancement