Application Security Engineer

PandaDoc empowers more than 60,000 growing organizations by providing an all-in-one document workflow automation platform that helps teams create, manage, and sign digital documents including proposals, quotes, and contracts.

• 2+ years of cloud security experience implementing security controls and best practices in AWS, GCP, or Microsoft Azure
• 2+ years of experience with security management tools, including IPS/IDS, WAF, vulnerability scanning, and penetration testing
• Good understanding of Access Control and Identity Access Management principles (SAML 2.0, OAuth, JWT, etc)
• Experience with implementing DevSecOps practices in SSDLC
• Solid interpersonal, written, and verbal communication skills
• Upper-Intermediate English level (B2+)

• Monitor and test information systems to identify vulnerabilities
• Execute or manage the remediation of identified vulnerabilities
• Respond to security incidents and perform root cause analysis
• Assess and understand PandaDoc’s current security framework and future architecture, providing recommendations for risk reduction
• Design, implement, maintain, and evangelize automated security solutions
• Work closely with engineering teams to implement new security controls
• Analyze and monitor relevant security threats and prevention measures based on industry trends and standards
• Perform cloud services hardening, including reviewing roles and permissions for services and APIs
• Help address emergent threats in AI security as PandaDoc deploys AI in its product and for internal use

The use of external recruiters/staffing agencies requires prior approval from PandaDoc's HR Team. External recruiters/staffing agencies are requested not to contact PandaDoc employees directly. PandaDoc is an Equal Opportunity Employer committed to equal treatment without regard to protected characteristics.