Monitor and test information systems to identify vulnerabilities
Execute or manage the remediation of identified vulnerabilities
Respond to security incidents and perform root cause analysis
Assess and understand PandaDoc’s current security framework and future architecture, providing recommendations for risk reduction
Design, implement, maintain, and evangelize automated security solutions
Work closely with engineering teams to implement new security controls
Analyze and monitor relevant security threats and prevention measures based on industry trends and standards
Perform cloud services hardening, including reviewing roles and permissions for services and APIs
Help address emergent threats in AI security as PandaDoc deploys AI in its product and for internal use

2+ years of cloud security experience implementing security controls and best practices in AWS, GCP, or Microsoft Azure
2+ years of experience with security management tools, including IPS/IDS, WAF, vulnerability scanning, and penetration testing
Good understanding of Access Control and Identity Access Management principles (SAML 2.0, OAuth, JWT, etc)
Experience with implementing DevSecOps practices in SSDLC
Solid interpersonal, written, and verbal communication skills
Upper-Intermediate English level (B2+).

Multisport Card for fitness and wellness activities (individual or family plan)
LuxMed healthcare coverage (individual or family plan)
UNUM life insurance protection (individual or family plan)
Onboarding benefit allowance that can be used for necessary work equipment and setup
6 self-care days beyond standard Polish vacation entitlements
Wellness, learning and development budgets
Employees may be able to purchase company stock or receive annual bonuses.

Application Security Engineer

Key skills