Application Security Engineer

Packsize; Salt Lake City (UT); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Packsize is looking for an experienced Application Security Engineer to champion secure software development across our technology stack. You'll collaborate with development teams, emphasizing secure practices throughout the software lifecycle.

This position requires expertise in embedding security into application environments, along with strong experience in vulnerability assessments and cloud security practices. A hybrid work model is available, enabling both office-based and remote opportunities.

Qualifications

• 10+ years of security-related experience with at least 5+ years in application security.
• Deep experience embedding security practices into the SDLC.
• Technical proficiency in vulnerability scanning and remediation.

Responsibilities

• Guide secure design and development of applications.
• Adopt automated security tools in the software lifecycle.
• Conduct threat modeling and vulnerability assessments.

Skills

Secure coding practices

Application vulnerability scanning

Cloud security best practices

Interpersonal skills

Job description

Job Title

Application Security Engineer

About Packsize

Packsize redefines the way businesses and their customers use and experience packaging around the world. We build technology, design solutions, and automate processes that propel the industry forward. Packaging is more than a box—it’s delivering what’s right for our customers, their customers, our people, and the planet.

About The Role

Packsize is seeking an experienced Application Security Engineer to champion secure software development across our technology stack. You will collaborate closely with development and product teams to integrate robust security practices into every stage of our SDLC, ensuring that security is a foundational element of our technology solutions and product innovations.

What You’ll Do

• Embed with software engineering teams to guide the secure design, development, and deployment of applications, advocating for “security by design.”
• Drive the adoption of automated security tools and processes within the software development lifecycle to detect and remediate vulnerabilities early.
• Conduct threat modeling, code reviews, and vulnerability assessments for web, cloud, and OT applications and services.
• Lead security initiatives targeting improvements in Packsize’s application and machine software environments.
• Serve as a subject matter expert for application security within cross-functional forums, providing clear guidance on secure coding, secure architecture, and best practices.
• Collaborate on the creation, maintenance, and communication of security policies and secure SDLC standards, ensuring alignment with industry regulations and compliance mandates.
• Identify, assess, and prioritize application security risks and work with engineering and business leaders to develop effective remediation strategies.
• Assess third-party and open-source dependencies for security risks, ensuring that vendor and supply chain security meet Packsize standards.
• Respond to security incidents involving applications, lead root‑cause analyses, and drive post‑incident improvements.
• Perform regular security testing, such as SAST, DAST, and penetration testing, to validate the security of applications.
• Provide expert input on cryptography and key management for applications, ensuring robust protection of data in transit and at rest.
• Evaluate and recommend new security solutions and tools to continually improve Packsize’s application security posture.

What You’ll Bring

• 10+ years of security‑related experience, with at least 5+ years in an application security or software security engineering role.
• Deep experience working with software development teams to embed security practices into the software development lifecycle and release processes.
• Technical proficiency in secure coding practices, application vulnerability scanning, and remediation.
• Experience securing OT and machine software environments, especially challenges like remote device deployment and secure firmware/software delivery.
• In‑depth knowledge of cloud security best practices and architecture for SaaS or IoT products.
• Demonstrated experience delivering and implementing technical security solutions for complex application environments.
• Strong background conducting security assessments, risk analyses, and security testing for applications.
• Familiarity with compliance requirements (GDPR, SOX) and security frameworks (SOC2, ISO, NIST) as they relate to application development and deployment.
• Excellent interpersonal skills; able to influence, educate, and partner with technical and business stakeholders at all levels.
• Passion for mentoring developers on secure coding and application security best practices.

Working Environment and Physical Demands

• Able to commute to Packsize Headquarters; hybrid remote work available.
• Office‑based work environment; ability to sit for extended periods and move about the office as needed.
• Periodic remote work; comfortable with a hybrid office setting.
• Ability to travel up to 15%, including international travel.

Equal Opportunity

Packsize is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, Packsize policy of equal employment opportunity prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity or expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups are strongly encouraged to apply. Reasonable accommodations in the application process will be provided to qualified individuals with disabilities.