Application Security Engineer, Pax8
$137-168k
Offers Non-Commissioned Bonus Plans or Variable Commission and Stock Option Eligibility
Marketplace for cloud-based business solutions
Be an early applicant
Marketplace for cloud-based business solutions
1001+ employees
Be an early applicant
$137-168k
Offers Non-Commissioned Bonus Plans or Variable Commission and Stock Option Eligibility
1001+ employees
Company mission
To be the world’s favourite marketplace for technology professionals to buy cloud products.
Role
Who you are
- At least two (2) years of experience in application/product security
- Background in the OWASP Top 10 application security defects, including the ability to identify and remediate such vulnerabilities in different languages
- Experience with modern software languages (we primarily use Kotlin and JavaScript)
- Experience developing threat models and leading secure code reviews
- Experience with application security testing processes such as SAST, SCA, and DAST through detection, triage, and remediation
- Knowledge of secure architecture and secure design patterns in a web-based microservices environment
- Background in cloud-based infrastructure and containerized application environments
- Experience with modern workflow management processes such as ticketing systems
- Experience with modern source code management systems and CI/CD platforms
- Ability to execute independently within a small, nimble team
- Compassionate Candour—We aim to assist others with candid, actionable feedback
- Seek to Understand—Be open, curious and committed to learning
- We Before Me—Actively collaborate and seek out diverse perspectives to ensure a win for Team Pax8
- Do What You Say—Take ownership and honor your commitments; prioritize and deliver
- Light Up Learning—Be brave and try new ideas; be vulnerable and share your failures so everyone can learn from our mistakes
- Driven by Passion—Connects personal passion to Pax8 mission, resilient in face of adversity and uncertainty in pursuit of mission
- B.A./B.S. in a related field (e.g., Computer Science, Engineering, Cybersecurity) or equivalent work experience
What the job involves
- Pax8’s Platform Security team is responsible for the implementation and operation of our application and infrastructure security program
- As a vital member of this group, the Application Security Engineer helps build and reinforce the security posture of Pax8’s software development lifecycle
- This role collaborates closely with our software development teams as we evolve our world-class software marketplace
- The AppSec Engineer is responsible for supporting the identification, evaluation, and mitigation of security defects; conducting and maintaining application threat models; assisting with the design and implementation of secure development frameworks; helping to train teams on secure coding practices; and validating security processes throughout the application build, deployment, and operation processes
- Serve as a subject matter expert on application security to help drive security considerations into product design and software development processes
- Assist in creating and maintaining risk assessments and threat models against evolving features in the Pax8 software platform
- Support the development and management of application security testing processes, including automated testing and manual design review processes
- Assist teams in reproducing, triaging, and addressing security vulnerabilities
- Contribute to the development of security standards and best practices, both in the form of written documentation and code-based guardrails
- Participate in maintaining application security tooling and associated process documentation as necessary
- Support security awareness efforts within the software engineering organization by participating in the delivery of security training sessions
Application process
- Expected Closing Date: 7/15/2025
Our take
Cloud computing facilitates access to software products without having the computer power required to use them, presenting great opportunities for enterprises to benefit from cutting-edge software. However, managing subscriptions to cloud products can be a convoluted process unique to each software product, presenting the need for a unified accessibility solution.
Pax8 provides an online marketplace for cloud-based software, allowing businesses to order, bill, manage, and provision cloud products within a single place. The marketplace contains a curated catalogue of cloud providers, a license management dashboard, demo infrastructure and tools for billing and invoicing, ultimately ensuring that users do not need to navigate outside the platform to manage their cloud software inventory.
Whilst many of the services provided by Pax8 are already included in cloud software applications, the company has made the smart move of partnering with software providers such as Bam Boom Cloud to unify all management tools into a single platform. By ensuring companies can browse, purchase, and manage cloud solutions within the marketplace, the company aims to increase accessibility and minimise complexities associated with cloud computing.
Steph
Company Specialist at Welcome to the Jungle
Insights
33% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Apr 2022
$185m
LATE VC
Jan 2021
$96m
LATE VC
Total funding: $336m
Company benefits
- Non-Commissioned Bonus Plans or Variable Commission
- 401(k) plan with employer match
- Medical, Dental & Vision Insurance
- Employee Assistance Program
- Employer Paid Short & Long Term Disability, Life and AD&D Insurance
- Flexible, Open Vacation
- Paid Sick Time Off
- Extended Leave for Life events
- RTD Eco Pass (For local Colorado Employees)
- Career Development Programs
- Stock Option Eligibility
- Employee-led Resource Groups
Company HQ
Bristol, UK
Leadership
John Street
(CEO)Experience as CEO, Chairman and Founder of MX Logic from 2002 to 2009. CEO and Chairman of MSBiotec from 2009 to 2018.
Share this job
View 21 more jobs at Pax8