Application Security Engineer

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Oversee and evaluate information systems to detect vulnerabilities

• Carry out or oversee the remediation of discovered vulnerabilities

• Address security incidents and conduct root cause analysis

• Examine and comprehend PandaDoc’s existing security framework and future architecture, offering recommendations for risk mitigation

• Design, implement, sustain, and advocate for automated security solutions

• Collaborate closely with engineering teams to integrate new security controls

• Analyze and track pertinent security threats and prevention strategies based on industry trends and standards

• Execute cloud services hardening, which includes reviewing roles and permissions for services and APIs

• Assist in tackling emerging threats in AI security as PandaDoc integrates AI into its products and internal operations

⛳️ Requirements

• A minimum of 2 years of cloud security experience implementing security controls and best practices in AWS, GCP, or Microsoft Azure

• At least 2 years of experience with security management tools, including IPS/IDS, WAF, vulnerability scanning, and penetration testing

• Strong understanding of Access Control and Identity Access Management principles (SAML 2.0, OAuth, JWT, etc.)

• Experience in implementing DevSecOps practices within SSDLC

• Excellent interpersonal, written, and verbal communication skills

• Upper-Intermediate English proficiency (B2+)

🏝️ Benefits

• A competitive salary. If you reside in Poland, the salary range is 222000 to 334000 PLN annually.

• A transparent, open culture that values feedback and fosters professional and personal growth

• The flexibility to work from anywhere — our team is spread across the globe, from Lisbon to Manila, and from Florida to California

• 6 self-care days

• And much more!