🔐 Director of Platform Security Engineering (Application Security) | Remote, United States

Lead the future of Application Security at Pax8 by shaping how secure software is designed, built, tested, and delivered across our cloud-native platform ecosystem.

Build Security Into Everything We Create

At Pax8, security is not a checkpoint. It's a core part of how we innovate.

We're looking for a Director of Platform Security Engineering to lead our Application Security and Secure Software Development programs across the business. This role offers the opportunity to influence engineering strategy at scale, helping teams build secure products from the first line of code through deployment and operation.

As we continue our journey toward AI-enabled products, automation, and intelligent platform experiences, you'll play a critical role in ensuring security is embedded into every aspect of software delivery. You'll partner closely with engineering leaders, architects, and product teams to build secure-by-design practices that enable innovation rather than slow it down.

⚠️ Important: This Is a Deeply Hands-On Application Security Leadership Role

This is not a traditional security management position.

The Director of Platform Security Engineering serves as Pax8's senior Application Security authority and is expected to remain actively engaged in the technical disciplines practiced by the team. While this role includes people leadership responsibilities, success requires current, hands-on Application Security expertise.

You should apply if you can confidently:

Lead and facilitate threat modeling exercises.
Review application architecture and secure design decisions.
Read, critique, and discuss application code with engineers.
Evaluate CI/CD pipeline security and software supply chain risks.
Assess authentication and authorization designs, including OAuth 2.0, OIDC, token management, and delegated access models.
Identify security flaws and vulnerability classes that others may miss.
Act as the final technical escalation point for complex Application Security challenges.

This role is likely not a fit if your recent experience has been primarily focused on people leadership, governance, compliance, audit, risk management, or security program management without substantial hands-on Application Security practice.

Join a Company Transforming the Cloud Marketplace

Pax8 is redefining how technology is bought, sold, and managed. We empower Managed Service Providers with a modern marketplace that simplifies cloud adoption and accelerates business growth.

As our platform and product portfolio continue to evolve, we're investing heavily in engineering excellence, automation, artificial intelligence, and security engineering. This is an opportunity to join a high-growth technology company where your work will directly influence how millions of future transactions, integrations, and partner experiences are secured.

What You'll Do

🔐 Lead Application Security Strategy

Define and execute the vision for Application Security, Product Security, and Secure Software Development across Pax8.
Build long-term security roadmaps aligned to engineering objectives, business priorities, and risk appetite.
Champion secure-by-design principles throughout the organization.

🏗️ Embed Security Into Engineering

Partner with engineering leaders to integrate security directly into software development workflows.
Drive adoption of secure coding standards, design reviews, threat modeling, and security architecture practices.
Ensure security becomes a natural part of how teams build and iterate on products.

🚀 Advance Secure SDLC Maturity

Establish scalable security engineering capabilities across the software development lifecycle.
Drive implementation and optimization of application security tooling, including static analysis, dynamic analysis, software dependency scanning, container security, and API security solutions.
Enhance automation that enables developers to identify and address security issues earlier in the development process.

🧩 Build Secure Products at Scale

Oversee security reviews for cloud-native applications, microservices, APIs, and emerging AI-enabled capabilities.
Guide teams through secure design decisions and product risk assessments.
Improve vulnerability management and remediation programs across development teams.

📊 Measure What Matters

Develop meaningful security engineering metrics that demonstrate program effectiveness and product security maturity.
Use data, analytics, and insights to continuously improve security outcomes and developer adoption.

🌍 Develop High-Performing Teams

Build, mentor, and empower a world-class team of security engineers and application security specialists.
Foster a collaborative culture that balances engineering velocity with security excellence.
Create opportunities for growth, innovation, and continuous learning.

⚡ Stay Ahead of Emerging Threats

Evaluate evolving risks across software supply chains, cloud-native architectures, APIs, and AI-driven technologies.
Lead security engineering responses to emerging vulnerabilities and threats.
Drive adoption of modern security practices that strengthen resilience across the platform.

Your Impact

Your leadership will directly influence how Pax8 develops and delivers software. Success in this role means enabling engineering teams to move faster and more confidently while reducing product risk, strengthening customer trust, and building scalable security capabilities that support the future of the business.

What We're Looking For

Current, hands-on Application Security expertise with the ability to serve as the senior technical authority for AppSec across the organization.
Extensive experience (10+ years) leading Application Security, Product Security, or Security Engineering teams within modern software organizations.
Proven success building and scaling Secure Software Development Lifecycle programs.
Deep expertise in threat modeling, secure design reviews, software security testing, secure coding practices, and vulnerability management.
Experience reviewing application architectures, software designs, and security controls at depth.
Strong understanding of modern authentication and authorization frameworks, including OAuth 2.0, OIDC, token-based authentication, and identity delegation patterns.
Strong understanding of cloud-native applications, microservices architectures, APIs, containers, and modern software delivery pipelines.
Demonstrated experience implementing and optimizing security tooling across application security and developer security ecosystems.
Experience influencing engineering organizations and driving security adoption through partnership and enablement.
Excellent communication skills with the ability to engage technical teams, executive stakeholders, and business leaders alike.
A passion for developing security talent and building high-performing teams.
A collaborative and pragmatic approach that enables innovation while reducing risk.

Education

Bachelor's degree in a related field or equivalent professional experience.

Compensation- $220,000-$235,000/yr depending on experience and qualifications

Grow With Us

There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

About Pax8

Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

Background Checks

As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records.

Equal Opportunities

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: https://www.pax8.com/en-us/terms/job-applicant-privacy-notice/

Application Deadline- 10/23/2026

At Pax8, we care deeply about building genuine, trust‑based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change.
By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you’re applying as your authentic self, you have nothing to worry about — we’re excited to meet you.

Perks:

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

401(k) with Company Match
Medical, Dental & Vision Coverage
Employee Assistance Program (EAP)
Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
Flexible Open PTO
Paid Sick Leave
Paid Parental Leave
RTD EcoPass (eligible Colorado-based employees)

Please take a moment to review our Proprietary Rights and Non-Competition Agreement — this document outlines important information about your rights and responsibilities if you join our team.

Job Applicant Privacy Notice

About Us

Pax8 is the global AI and cloud Marketplace for small and medium-sized businesses (SMBs). Pax8 connects service providers and technology companies on a unified platform to discover, buy, sell, deploy and manage technology solutions for SMBs. More than 47,000 IT partners and 800,000 SMBs rely on Pax8 for expertise, automation and real-time insights to stay productive, protected and prepared for the AI economy. Learn more at pax8.com.

Our purpose is to help every small business turn their dreams into reality through the power of technology.

Culture is important to us, and at Pax8, its business, and it IS personal. We embody Compassionate Candour by aiming to assist others with candid, actionable feedback. We Seek to Understand by being open, curious, and committed to learning. We believe in We Before Me, actively collaborating and seeking out diverse perspectives to ensure a win for Team Pax8. Our team takes pride in Do What You Say, taking ownership, honoring commitments, prioritizing, and delivering on promises. We encourage everyone to Light Up Learning by being brave and trying new ideas, embracing vulnerability, and sharing failures so everyone can learn. Finally, we are Driven by Passion, connecting personal passion to Pax8's mission, and remaining resilient in the face of adversity and uncertainty in pursuit of our goals.

At Pax8, we are passionate, creative, and humorously offbeat. We work hard, keep it fun, and expect the best!

Director of Platform Security Engineering (Application Security)