Remote Senior App Security Engineer: AI & Cloud

Pax8 Philippines Inc.; United States; Remoto; USD 140.000 - 180.000; Tempo pieno

Descrizione del lavoro

Pax8 Philippines Inc. is hiring a Senior Application Security Engineer to own security across cloud-based products, AI-enabled features, and financial platforms from a remote US-based location.

You will partner with engineering leaders to influence secure design, conduct threat modeling, perform manual code review, and manage the vulnerability lifecycle beyond automated findings, while embedding security into developer workflows and pipelines.

Competenze

• Substantial application or product security experience with engineering teams.
• Threat modeling and manual code review for web and microservice environments.
• Strong understanding of authorization, multi-tenant isolation, and business-logic vulnerabilities.
• Hands-on tooling for source-code analysis, dependency analysis, dynamic testing, and secret detection in CI/CD.
• Ability to distinguish a noisy security finding from an exploitable risk and explain remediation clearly.
• Experience creating automation or engineering tooling for vulnerability management, including AI/agents.
• Practical understanding of security risks in AI-assisted development, including prompt injection and data-exfiltration paths.
• Proficiency with at least one modern cloud-native language; comfortable reading Kotlin/JS/TS.
• Working knowledge of AWS, Kubernetes, containers, and infrastructure as code.
• Bonus in agentic security or Model Context Protocol integrations.
• Confidence to challenge a design constructively.

Mansioni

• Be a trusted security partner to your product area, working alongside engineering leads and architects to influence secure design and implementation.
• Lead practical threat modeling, helping teams understand where risk lives and turning that insight into actionable engineering decisions.
• Go beyond automated findings with hands-on code review, design review, and security testing that identifies the issues requiring real human judgment.
• Own the vulnerability lifecycle, evaluating findings from static/dynamic scans and secret-detection tools and helping teams prioritize what matters.
• Make security tooling better, tuning and maintaining security tooling within delivery pipelines and bringing security insights into developer workflows.
• Build for the AI era, creating agentic tooling that improves vulnerability triage and remediation guidance with human oversight.
• Help secure AI-assisted development by shaping guardrails for AI-assisted and agent-generated code and validating controls.
• Turn identified vulnerabilities into resolved vulnerabilities by reproducing issues, shaping remediation, and validating fixes.
• Represent security in architectural decisions, clearly explaining risk, tradeoffs, and practical paths forward.
• Raise security capability around you by mentoring engineers and security champions.

Conoscenze

Application security

Threat modeling

Code review

Vulnerability management

Security tooling

AI security

Architectural decisions

Mentoring

AWS

Kubernetes

Containers

IaC

LLM/Agents security

Descrizione del lavoro

Pax8 Philippines Inc. is hiring a Senior Application Security Engineer to own security across cloud-based products, AI-enabled features, and financial platforms from a remote US-based location.

You will partner with engineering leaders to influence secure design, conduct threat modeling, perform manual code review, and manage the vulnerability lifecycle beyond automated findings, while embedding security into developer workflows and pipelines.