Application Security Engineer
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Proven ability to perform deep-dive manual security testing while also securing production-quality code. • Expert-level knowledge of OWASP Top 10, CWE, and API security vulnerabilities (Go, Java, or Ruby preferred). • Experience building and scaling security checks directly into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins). • Working knowledge of AWS/GCP security configurations, particularly IAM, VPCs, and WAF management.
Responsibilities
• Perform deep-dive security reviews of web applications, APIs, and cloud infrastructure. • Develop security-focused tools and libraries in Go, Java, or Ruby to assist developers in writing secure code. • Support our blockchain initiatives by identifying risks in L1/L2 integrations and smart contract interactions. • Manage and tune Web Application Firewalls (WAF) and cloud-native security controls. • Contribute to the security culture through developer training and participating in incident response when necessary. • Build and maintain the tooling that integrates security into our development lifecycle, moving from manual reviews to automated, scalable guardrails. • Partner with engineering teams during the design phase of new features (Threat Modeling) to identify risks before a single line of code is written. • Manage the end-to-end lifecycle of vulnerabilities, from discovery via internal audits or Bug Bounties to collaborating with engineers on "gold-standard" remediations.
Benefits
• Tier 1Annual Salary $169,150 – $195,000 • Offers Equity • Pay and BenefitsPaxos offers a competitive total compensation and benefits package, including equity and bonuses based on both your individual performance and company performance. Eligibility for bonuses is dependent on job level, and actual salary within the range depends on your skills, experience, and qualifications. • or drag and drop here • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran