PandaDoc provides a digital platform that automates the creation, sending, signing, and management of business documents such as quotes, contracts, and invoices.
<p><strong>As PandaDoc continues to scale, we’re expanding our security team and looking for an Application Security Engineer to help shape and strengthen our security foundations. In this role, you’ll take ownership of key security initiatives across our application, working closely with engineering to embed security into every stage of development. You’ll contribute to building a proactive, automation-driven security culture while addressing both current risks and emerging challenges, including AI security.</strong></p> <h2><strong>In this role, you will:</strong></h2> <ul> <li>Review, test, and monitor our applications to identify security weaknesses</li> <li>Manage vulnerabilities from discovery through remediation, working directly with engineering teams to resolve them</li> <li>Respond to infrastructure security alerts and perform hardening, including reviewing roles and permissions across services and APIs</li> <li>Participate in incident response and root cause analysis</li> <li>Analyze and monitor relevant security threats and prevention measures based on industry trends and standards</li> <li>Partner with product, development, and infrastructure teams to embed security requirements into how they build</li> <li>Integrate and operate automated security testing across the development lifecycle, including SAST, DAST, SCA, secrets detection, container, and supply chain security</li> <li>Develop security automation and tooling to scale security across engineering</li> <li>Drive threat modeling and secure-by-design practices across our services</li> <li>Assess our overall security posture and identify risks, providing recommendations to strengthen it</li> <li>Assist in addressing emergent threats in AI security as PandaDoc deploys AI in its product and for internal use</li> </ul> <h2><strong>Our stack:</strong></h2> <ul> <li>Service-oriented architecture</li> <li>Main development stacks: Java/Spring, Python/Django, JavaScript/React</li> <li>Docker, Kubernetes</li> <li>Amazon Web Services: EKS, RDS, S3, ElastiCache, etc.</li> <li>Monitoring stack: Grafana, Loki, Tempo, Mimir</li> <li>Source control & CI/CD: GitHub / GitHub Actions</li> <li>A combination of AWS native and 3rd party security solutions for infrastructure and application security (WAF, CNAPP, SCA/SAST, DAST, IDS/IPS, etc.)</li> </ul> <h2><strong>About you:</strong></h2> <ul> <li>3+ years of experience with application security tools such as SAST/SCA, DAST, WAF, CI/CD security, and penetration testing</li> <li>2+ years of cloud security experience implementing security controls and best practices in AWS, GCP, or Microsoft Azure</li> <li>Strong background in web application security, including common vulnerability classes (OWASP Top 10, CWE Top 25), attack vectors, and mitigations</li> <li>Good understanding of access control and identity management principles (SAML 2.0, OAuth, OIDC, JWT, etc.)</li> <li>Practical skills building security automation and tooling with Python, Bash, or equivalent languages</li> <li>Experience implementing DevSecOps practices across the SDLC</li> <li>Familiarity with containerized, Kubernetes-based environments and their security</li> <li>Solid interpersonal, written, and verbal communication skills</li> <li>Upper-Intermediate English level (B2+)</li> </ul> <h2><strong>Company Overview: </strong></h2> <p><span style="font-weight: 400;">PandaDoc empowers more than 60,000 growing organizations to thrive by taking the work out of document workflow. PandaDoc provides an all-in-one document workflow automation platform that helps fast scaling teams accelerate the ability to create, manage, and sign digital documents including proposals, quotes, contracts, and more. For more information, please visit </span><a href="https://www.pandadoc.com/"><span style="font-weight: 400;">https://www.pandadoc.com</span></a><span style="font-weight: 400;">.</span></p> <h2><strong>Company Culture: </strong></h2> <p><span style="font-weight: 400;">We're known for our work-life balance, kind co-workers, & creative virtual team-bonding events. And although our Pandas are located across the globe, we stay connected with the help of technology and ensure that everyone on our team feels, well, like a team.</span></p> <p><span style="font-weight: 400;">Pandas work best when they're happy. We retain our talent by upholding our values of integrity & transparency, and selling a product that changes the lives of our customers. </span></p> <p><span style="font-weight: 400;">Check out our </span><a href="https://www.linkedin.com/company/pandadoc/life/pdcompanyculture"><span style="font-weight: 400;">LinkedIn</span></a><span style="font-weight: 400;"> to learn more.</span></p> <h2><strong>Salary:</strong></h2> <p>The monthly base salary for this role is 21,000 PLN to 24,750 PLN.</p> <h2><strong>Benefits:</strong></h2> <p>Our team members and their families have access to comprehensive benefits including:</p> <ul> <li>Multisport Card for fitness and wellness activities (individual or family plan)</li> <li>LuxMed healthcare coverage (individual or family plan)</li> <li>UNUM life insurance protection (individual or family plan)</li> <li>Onboarding benefit allowance that can be used for necessary work equipment and setup</li> <li>6 self-care days beyond standard Polish vacation entitlements </li> <li>Wellness, learning and development budgets</li> <li>Employees may be able to purchase company stock or receive annual bonuses.</li> </ul> <p><strong>PandaDoc is an Equal Opportunity Employer.</strong><span style="font-weight: 400;"> We are committed to equal treatment of all employees without regard to race, national origin, religion, gender, age, sexual orientation, veteran status, physical or mental disability or other basis protected by law.</span></p> <p><strong>EXTERNAL RECRUITERS</strong></p> <p><strong>Approval Requirement</strong></p> <p><span style="font-weight: 400;">The use of external recrui