Staff Security Engineer

🕒 August 6

🇺🇸 United States – Remote

💵 $160k - $195k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Beyond Finance

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💸 Finance

💳 Fintech

👥 B2C

💰 $110M Debt Financing on 2021-02

Finance • Fintech • B2C

Beyond Finance is a financial services company that offers debt consolidation and management solutions to help individuals move beyond debt. They provide personalized options to reduce fees and interest, and aim to cut monthly payments for enrolled debts by 40% or more. Beyond Finance assists clients through a structured program designed to eliminate debt typically within 24 to 48 months, utilizing an easy-to-use mobile app for program management. Despite the potential impacts on credit scores, their services have positively impacted over 700,000 clients, offering consolidation loans ranging from $1,000 to $100,000. They also focus on customer satisfaction, receiving high ratings on platforms such as Trustpilot.

📋 Description

• Serve as the security technical authority across projects and domains, from design through post-incident response • Raise security architecture, process, and technical decision standards across the department • Partner with engineering and DevOps during design and sprint planning to address risk proactively • Build and maintain secure development and secure-infrastructure standards, playbooks, and enablement materials • Guide secure design, threat modeling, and code review for web and mobile applications • Manage and improve application security tooling, including SAST, SCA, secret scanning, DAST, ASM, and mobile security tools • Triage application vulnerabilities and drive remediation with engineering teams • Contribute to AWS cloud security posture, including IAM, network segmentation, containers, secrets, and data exposure • Establish Terraform secure defaults through reusable modules, guardrails, and policy as code with DevOps • Operate and tune WAF rules, rate limiting, and bot mitigation • Contribute to vulnerability management through intake, prioritization, SLA tracking, and remediation • Build Python security automation and internal tooling for ingestion, deduplication, prioritization, and developer workflows • Build and operate security log pipelines and tune SIEM detections and alerts • Deploy and tune endpoint security controls • Integrate the security stack through APIs and connective code • Partner with DevOps to harden CI/CD pipelines and embed security checks, secrets detection, scanning, and policy-as-code gates

🎯 Requirements

• 10+ years of hands-on security engineering experience • Deep, demonstrable ownership of application security, cloud security, or security automation and tooling, with working proficiency across the other two domains • Application security knowledge including secure coding practices, OWASP Top 10, SAST/DAST/ASM tooling, and secure SDLC • Cloud security experience in AWS, including IAM, networking, container orchestration, logging and audit, CNAPP posture management, and vulnerability management at scale • Security automation and tooling experience building custom tooling and log pipelines primarily in Python, SIEM onboarding and detection engineering, and endpoint security across a mixed fleet • Working knowledge of OWASP Top 10 and threat modeling • Hands-on Infrastructure as Code experience with Terraform • Ability to operate independently and drive projects without day-to-day oversight • Nice to have: PCI-regulated or financial services environment experience • Nice to have: mobile application security experience • Nice to have: AI/ML security exposure, including prompt injection, data poisoning, model abuse, and mitigating controls • Nice to have: identity security across human and non-human identities • Nice to have: development experience with Ruby on Rails, Python, Go, or similar languages

🏖️ Benefits

• Competitive compensation • Considerable employer contributions for health, dental, and vision programs • Generous PTO, paid holidays, and paid parental leave • 401(k) matching program • Merit advancement opportunities • Career development & training • Uplifting, collaborative work environment • Community, connection, and belonging across the organization