Director of Platform Security Engineering (Application Security)

Pax8 Philippines Inc.; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Pax8 is seeking a Director of Platform Security Engineering to lead our Application Security and Secure Software Development programs across the business. This hands-on leadership role requires deep technical expertise and the ability to influence engineering strategy at scale, from first lines of code through deployment.

You will partner with engineering leaders, architects, and product teams to embed secure-by-design practices, govern security standards, and drive threat modeling for high‑risk

Qualifications

• Hands-on Application Security expertise required.
• Experience leading threat modeling for high-risk systems.
• Ability to review architecture and secure design decisions.
• Strong collaboration with engineering teams.

Responsibilities

• Define and execute the vision for Application Security and Secure SDLC across Pax8.
• Embed security into engineering workflows and drive secure coding standards.
• Lead threat modeling and oversee risk management for critical systems.

Skills

Threat modeling

Secure coding practices

Security architecture

Code review

Tools

SAST tools

DAST tools

CI/CD security tooling

Job description

Director of Platform Security Engineering (Application Security) | Remote, United States

Build Security Into Everything We Create

At Pax8, security is not a checkpoint. It's a core part of how we innovate.

We're looking for a Director of Platform Security Engineering to lead our Application Security and Secure Software Development programs across the business. This role offers the opportunity to influence engineering strategy at scale, helping teams build secure products from the first line of code through deployment and operation.

As we continue our journey toward AI-enabled products, automation, and intelligent platform experiences, you'll play a critical role in ensuring security is embedded into every aspect of software delivery. You'll partner closely with engineering leaders, architects, and product teams to build secure-by-design practices that enable innovation rather than slow it down. You'll be responsible not only for Application Security, but also for helping define the security model for Pax8's emerging agentic AI systems, AI-assisted development workflows, and cloud platform security posture. This role owns the technical outcomes of the Platform Security Engineering function and serves as the final technical authority for Application Security across Pax8.

Important: This Is a Deeply Hands-On Application Security Leadership Role

This is not a traditional security management position. The Director of Platform Security Engineering serves as Pax8's senior Application Security authority and is expected to remain actively engaged in the technical disciplines practiced by the team. While this role includes people leadership responsibilities, success requires current, hands-on Application Security expertise.

You should apply if you can confidently:

• Lead and facilitate threat modeling exercises.
• Review application architecture and secure design decisions.
• Read, critique, and discuss application code with engineers.
• Evaluate CI/CD pipeline security and software supply chain risks.
• Assess authentication and authorization designs, including OAuth 2.0, OIDC, token management, and delegated access models.
• Identify security flaws and vulnerability classes that others may miss.
• Act as the final technical escalation point for complex Application Security challenges.
• Personally lead threat models for high-risk systems and initiatives.
• Evaluate AI-powered systems and agentic workflows for authorization boundaries, prompt injection risks, tool access controls, and data exposure concerns.
• Validate the technical output of Application Security and Cloud Security engineers and establish engineering standards for the team.

This role is likely not a fit if your recent experience has been primarily focused on people leadership, governance, compliance, audit, risk management, or security program management without substantial hands-on Application Security practice.

Join a Company Transforming the Cloud Marketplace

Pax8 is redefining how technology is bought, sold, and managed. We empower Managed Service Providers with a modern marketplace that simplifies cloud adoption and accelerates business growth.

As our platform and product portfolio continue to evolve, we're investing heavily in engineering excellence, automation, artificial intelligence, and security engineering. This is an opportunity to join a high-growth technology company where your work will directly influence how millions of future transactions, integrations, and partner experiences are secured.

What You'll Do

Lead Application Security Strategy

Define and execute the vision for Application Security, Product Security, and Secure Software Development across Pax8. Build long-term security roadmaps aligned to engineering objectives, business priorities, and risk appetite. Champion secure-by-design principles throughout the organization. Own the technical outcomes of the Platform Security Engineering program across five product domains with differing risk profiles and engineering models. Translate platform security strategy into specific engineering initiatives and measurable outcomes. Serve as Pax8's senior Application Security practitioner and technical authority.

Embed Security Into Engineering

Partner with engineering leaders to integrate security directly into software development workflows. Drive adoption of secure coding standards, design reviews, threat modeling, and security architecture practices. Ensure security becomes a natural part of how teams build and iterate on products.

Advance Secure SDLC Maturity

Establish scalable security engineering capabilities across the software development lifecycle. Drive implementation and optimization of application security tooling, including static analysis, dynamic analysis, software dependency scanning, container security, an