Remote Senior App Security Engineer — AI & Cloud

Pax8, Inc.; United States; Remote; USD 140,000 - 160,000; Full time

Benefits offered by this job

401(k) with Company Match

Medical, Dental & Vision Coverage

Employee Assistance Program (EAP)

Employer-Paid Life, AD&D, Disability

Flexible Open PTO

Paid Parental Leave

RTD EcoPass (Colorado-based)

Job summary

Pax8 is seeking a Senior Application Security Engineer to own security across cloud, AI, and financial platforms in a fully remote US role. You will partner with engineering leaders to shape secure design, perform hands-on reviews, and drive remediation across complex microservices and cloud-native environments.

The role emphasizes practical threat modeling, vulnerability lifecycle ownership, and the development of security tooling integrated into developer workflows.

Qualifications

• Substantial application or product security experience partnering with software engineering teams.
• Hands-on threat modeling and manual code review for web/microservice environments.
• Strong understanding of authorization, multi-tenant isolation, and business-logic vulnerabilities.
• Experience operating tooling for source-code analysis, dependency analysis, dynamic testing, and secret detection.
• Ability to distinguish noisy findings from real risk and explain remediation clearly.

Responsibilities

• Be a trusted security partner to your product area, influencing secure design and implementation.
• Lead practical threat modeling and translate risk into actionable engineering decisions.
• Go beyond automated findings with hands-on code/design review and security testing.
• Own the vulnerability lifecycle from discovery to remediation and verification.
• Mentor teammates and security champions to raise overall security capability.

Skills

Threat modeling

Manual code review

Web and microservices security

Authorization & multi-tenant isolation

Automation tooling for vulnerability

LLM/Agent security workflows

Cloud-native programming (Kotlin/JS/TS

AWS, Kubernetes, containers, IaC

Tools

Source-code analysis tools

Dependency analysis tooling

Dynamic testing tools

Secret detection tooling

Job description

Pax8 is seeking a Senior Application Security Engineer to own security across cloud, AI, and financial platforms in a fully remote US role. You will partner with engineering leaders to shape secure design, perform hands-on reviews, and drive remediation across complex microservices and cloud-native environments.

The role emphasizes practical threat modeling, vulnerability lifecycle ownership, and the development of security tooling integrated into developer workflows.