Application Security and Risk Engineer

Senior Application Security Engineer | United States | Remote
Pax8 is hiring a

Senior Application Security Engineer

in the United States to help secure the cloud marketplace, financial platforms, and agentic AI products powering our next chapter.
This is application security with real ownership. You’ll partner directly with engineering leaders and architects, influence how products are designed and delivered, and combine deep security craft with emerging AI capabilities. AI is a force multiplier, but great security judgment comes first.

Pax8 is evolving quickly, and our Platform Security team is growing alongside our product landscape. You’ll join a small, collaborative remote team where you’re trusted to take ownership, work independently, and bring security into engineering conversations early.
We’re building at the intersection of cloud, security, automation, and AI. Be a trusted security partner

to your product area, working alongside engineering leads and architects to influence secure design and implementation.
Lead practical threat modeling

, helping teams understand where risk lives and turning that insight into actionable engineering decisions.
Own the vulnerability lifecycle

, evaluating findings from static application security testing, software composition analysis, dynamic application security testing, and secret-scanning tools and helping teams prioritize what genuinely matters.
Make security tooling better

, tuning and maintaining security tooling within delivery pipelines and bringing useful security insight directly into developer workflows.
Build for the AI era

, creating agentic tooling that can improve vulnerability triage, deduplication, exploitability enrichment, and remediation guidance while maintaining appropriate human oversight.
Help secure AI-assisted development

, shaping guardrails for AI-assisted and agent-generated code and validating whether those controls work in practice.
Represent security in architectural decisions

, clearly explaining technical risk, tradeoffs, and practical paths forward.
Support penetration-testing findings, bug bounty triage, and security incidents when your application security expertise is needed.
You’ll help bring security closer to the engineering teams building Pax8’s next generation of products. Your work will make application security more scalable, measurable, and useful to developers while helping the business innovate confidently across established cloud products, new financial technology, and emerging agentic AI capabilities.
You won’t simply point out risk. You’ll help engineering teams understand it, solve it, and build more securely the next time.

⭐ Substantial application or product security experience

, with a track record of partnering directly with software engineering teams.
Deep practical capability in

threat modeling and manual code review

for web and microservice environments.
Strong understanding of difficult application-security problems such as

authorization, multi-tenant isolation, and business-logic vulnerabilities

.
Hands-on experience operating application security tooling for

source-code analysis, dependency analysis, dynamic testing, and secret detection

, including configuration, tuning, pipeline integration, and finding triage.
The technical judgment to distinguish a noisy security finding from an exploitable risk and explain the remediation clearly.
Applying large language models or agents to security workflows is especially valuable.
Practical understanding of security risks in

large language model and agentic applications

, including prompt injection, unauthorized tool use, and potential data-exfiltration paths.
Proficiency with at least one modern cloud-native programming language. Our environment includes

Kotlin and JavaScript/TypeScript

, and you should be comfortable reading unfamiliar code.
Working knowledge of

Amazon Web Services, Kubernetes, containers, and infrastructure as code

.
Bonus depth in securing agentic applications, Model Context Protocol integrations, identity and authorization in multi-tenant software-as-a-service environments, or transactional and financial systems.
At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire.
To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

Application Deadline: At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. Medical, Dental & Vision Coverage
~ Employee Assistance Program (EAP)
~ Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
~ Flexible Open PTO
~ Youll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, youll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. Well give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

☁️ Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, its business, and it IS personal. We are passionate, creative, and unconventional. As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. At Pax8, we care deeply about building genuine, trust‑based relationships — starting with how we hire.
To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change.
At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. Medical, Dental & Vision Coverage
~ Employee Assistance Program (EAP)
~ Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
~ Flexible Open PTO
~ Please take a moment to review our Proprietary Rights and Non-Competition Agreement — this document outlines important information about your rights and responsibilities if you join our team.