For Employers

AXON-Networks

Senior Cloud & Application Security Engineer

Posted 7 days ago
$150K - $220K per year
5-10 years experience
Apply Now

Please mention DailyRemote when applying

?Not checked yet0100
Resume Match Score

See how much of this job your resume covers, and what’s missing.

Want a recruiter to go through it line by line?

Get professional review

Tailor your resume to this job

One click makes a copy of your resume for this role, scores it against the posting, and proposes edits line by line. Your default resume is never changed.

  • Job match score for this posting
  • Edits you accept or skip, no invented facts
  • Download it when it reads right: TXT free, PDF with Premium

Create a cover letter for this job

Upload your resume and we draft a letter for this exact role, tailored to what it asks for.

  • Tailored to this role
  • Based on your resume
  • Fully editable
AI Summary

The Senior Cloud & Application Security Engineer will partner with engineering and operations teams to identify security weaknesses and implement practical controls across cloud-native platforms. Responsibilities include managing application security, securing CI/CD pipelines, performing vulnerability assessments, and providing technical guidance to security champions.

AXON Networks delivers a robust AI-driven, analytics-based orchestration platform and a wide portfolio of next-gen high-speed routers that leverage the newest Wi-Fi technologies. Together, these technologies give ISPs the ability to manage and troubleshoot their networks in real time, and to deliver an outstanding customer experience.

AXON Networks is a trusted strategic partner for its customers, helping them evaluate their current technologies and business models, and creating and executing strategies that enable them to innovate faster, accelerate their digital transformations, and strengthen their relationships with consumers.

AXON Networks is headquartered in Irvine, CA USA with Asia HQ in Singapore and also operating in Denmark, Spain and Vietnam.

The Senior Cloud & Application Security Engineer is the primary hands-on technical security engineer within AXON's Information Security organization.

This role partners closely with Software Engineering, Cloud Operations, Platform Engineering, DevOps, QA, and Product teams to identify security weaknesses, design practical controls, validate remediation, improve development security practices, and strengthen AXON's cloud-native platforms.

The ideal candidate is comfortable moving between source code, CI/CD pipelines, Kubernetes clusters, cloud infrastructure, APIs, identity systems, vulnerability findings, architecture diagrams, and production environments.

This position is not intended to replace Engineering ownership of secure software and infrastructure. Instead, the Security Engineer provides security expertise, technical assurance, tooling, standards, testing, and guidance to help engineering teams build and operate secure systems.

 

Responsibilities

  •  
Application Security
  • Partner with development teams to improve secure coding and application security practices.
  • Review security findings produced by SAST, SCA, dependency scanning, container scanning, secret detection, and other security tooling.
  • Assist teams in determining exploitability, exposure, severity, and appropriate remediation.
  • Perform targeted manual security reviews of applications, APIs, and services.
  • Participate in application and architecture threat modeling.
  • Help define secure API design and input validation requirements.
  • Review authentication, authorization, session management, cryptography, secrets handling, and other security-sensitive functionality.
  • Support penetration testing and validate remediation of penetration test findings.
DevSecOps and Software Supply Chain Security
  • Integrate and improve security controls within CI/CD pipelines.
  • Partner with DevOps and Engineering teams on security gates and automated security testing.
  • Improve source code, dependency, container, and artifact security.
  • Assist with implementation of artifact integrity, signing, provenance, and software supply chain controls.
  • Evaluate build and deployment workflows for security weaknesses.
  • Help define appropriate security controls without creating unnecessary development friction.
Cloud and Kubernetes Security
  • Assess Kubernetes clusters, workloads, cloud environments, and supporting infrastructure for security weaknesses.
  • Review identity and access management configurations.
  • Evaluate network security, segmentation, ingress/egress controls, workload identities, and service-to-service access.
  • Review container security, runtime configuration, secrets management, and image security.
  • Support implementation and validation of cloud security baselines.
  • Review infrastructure-as-code for security issues.
  • Partner with Cloud Operations and Platform Engineering on secure architecture.
Vulnerability Management
  • Perform technical analysis of vulnerabilities affecting AXON software, infrastructure, containers, dependencies, and services.
  • Evaluate newly disclosed CVEs for applicability and exposure.
  • Assist the Information Security Analyst and Engineering teams with vulnerability triage.
  • Validate vulnerability remediation where appropriate.
  • Help distinguish theoretical scanner findings from meaningful exploitable risk.
  • Document technical findings and remediation recommendations.
Security Architecture
  • Participate in design and architecture reviews.
  • Identify security risks early in the system design lifecycle.
  • Recommend practical technical controls and architectural improvements.
  • Review new technologies, platforms, integrations, and services for security implications.
  • Help maintain approved security patterns and reference architectures.
Security Testing
  • Conduct targeted security testing of applications, APIs, cloud services, infrastructure, and configurations.
  • Develop repeatable security validation procedures and automation where appropriate.
  • Coordinate with external penetration testing providers.
  • Reproduce security findings and verify fixes.
  • Assist teams in developing security-focused test cases.
Detection and Incident Response
  • Assist with technical investigation of suspected security incidents.
  • Review logs, cloud events, authentication activity, network activity, and system evidence.
  • Help improve security telemetry and detection capabilities.
  • Participate in incident response exercises and post-incident reviews.
Security Champion Support
  • Provide technical guidance and mentorship to Security Champions.
  • Develop technical security training for Engineering and Operations teams.
  • Participate in Security Champion Council meetings.
  • Help Champions evaluate findings within their teams.
  • Promote reusable secure engineering patterns.

 

Requirements:

  • 5+ years of experience in application security, cloud security, security engineering, DevSecOps, penetration testing, platform engineering, or related technical roles.
  • Strong knowledge of cloud-native application architectures.
  • Strong practical knowledge of Kubernetes and containers.
  • Understanding of CI/CD pipelines and modern software development workflows.
  • Experience with application security testing tools including SAST, SCA, container scanning, dependency scanning, and secret detection.
  • Strong understanding of common application vulnerabilities and secure coding practices.
  • Experience evaluating REST APIs, service-to-service communications, authentication, authorization, and secrets handling.
  • Experience with at least one major public cloud platform.
  • Ability to analyze vulnerabilities and determine realistic exploitability and impact.
  • Ability to communicate effectively with developers and infrastructure engineers. 

Preferred qualifications

 

  • Experience with Go, Java, Python, C/C++, or other languages used in cloud-native environments.
  • Experience with GitLab Ultimate security functionality.
  • Experience with Terraform, Helm, Kubernetes operators, or infrastructure-as-code.
  • Experience with Azure, GCP, or OCI.
  • Familiarity with service meshes, gRPC, message buses, distributed systems, and microservice architectures.
  • Familiarity with OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV, and related vulnerability frameworks.
  • Experience with security testing tools such as Burp Suite, Nmap, Semgrep, Trivy, or equivalent tools.
  • Relevant certifications such as OSCP, CSSLP, CCSP, GIAC, Kubernetes security certifications, or equivalent practical experience.

 

The role is primarily intended for local candidates, with remote US-based candidates considered. Please note that we are unable to offer visa sponsorship for this role.

Annual salary range: $150,000 - $220,000

 

Join AXON Networks!

At AXON Networks, we promote equal opportunities in all our recruitment processes, ensuring non-discrimination on the basis of gender, age, origin, disability, or any other personal circumstances. We assess talent based on objective criteria and foster an inclusive and diverse working environment.

Automatically Apply to the Best Remote Jobs

Stop the endless job search. Our AI finds and applies to the best jobs for you.

Try it Now
Keep looking

Similar Jobs

See all Remote Software Development jobs →

Principal Agentic AI Platform Engineer

Full Time United States $179K - $234K per year Software Development

Sr. Technical Solutions Architect, AI/Data - Bilingual

Full Time United States, Canada 123K - 154K per year Software Development

Cement Engineer

Full Time United States Software Development

Senior Sales Systems Engineer (Field based)

Full Time United States $64400 - $168K per year Software Development

GCP & Data Ingestion Lead - Remote in México

Full Time Mexico Software Development

Senior Database Engineer

Freelance United States $75 - $85 per hour Software Development
Apply Now

Personalize your Remote Job Search in 3 Easy Steps!

Featuring 221,432+ Jobs in Application Security Engineer

Answer easy questions

Answer easy questions

221,432+ jobs across 15+ categories

Get your best job matches

Get your best job matches

Only hand-screened, legit jobs

Find a remote job faster

Find a remote job faster

No ads, scams, or junk

“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”

Sarah J. — Sarah J. · Marketing Manager ★★★★★ Verified