Staff Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $160k - $195k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Beyond Finance

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💸 Finance

💳 Fintech

👥 B2C

💰 $110M Debt Financing on 2021-02

Finance • Fintech • B2C

Beyond Finance is a financial services company that offers debt consolidation and management solutions to help individuals move beyond debt. They provide personalized options to reduce fees and interest, and aim to cut monthly payments for enrolled debts by 40% or more. Beyond Finance assists clients through a structured program designed to eliminate debt typically within 24 to 48 months, utilizing an easy-to-use mobile app for program management. Despite the potential impacts on credit scores, their services have positively impacted over 700,000 clients, offering consolidation loans ranging from $1,000 to $100,000. They also focus on customer satisfaction, receiving high ratings on platforms such as Trustpilot.

📋 Description

• Lead and evolve the company's application security strategy, roadmap, and day-to-day operations • Serve as the primary AppSec partner for development teams working on Ruby on Rails web apps, React Native mobile apps, Python, and Go projects • Provide security guidance during design, development, and code review • Drive secure coding practices and threat modeling across engineering teams • Manage and optimize GitHub Advanced Security, Invicti, Hadrian, AppDome, and Cloudflare WAF • Improve security-tool automation and CI/CD integration • Build secure development standards, playbooks, and training materials • Partner with engineering during sprint planning and feature design to address risks proactively • Conduct security reviews, code assessments, and vulnerability triage • Work with DevOps on secure AWS infrastructure deployments and configurations • Harden ECS, IAM, networking, and supporting cloud services • Design and maintain secure CI/CD workflows • Lead or support investigation and remediation of application-level vulnerabilities • Monitor, prioritize, and track SAST, DAST, and ASM findings • Collaborate with engineering on timely and effective remediation

🎯 Requirements

• 8+ years of experience in Application Security, Product Security, or related engineering roles • Strong understanding of secure coding practices, OWASP Top 10, and modern SDLC • Experience with cloud-native applications, ideally AWS • Understanding of SSL certificates and cryptographic key management • Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools • Ability to partner with developers and influence secure design decisions • Familiarity with GitHub-based workflows and CI/CD pipelines • Development experience with Ruby on Rails or similar dynamic languages (nice to have) • Knowledge of AWS ECS/EKS, container security, secrets management, and infrastructure-as-code with CloudFormation or Terraform (nice to have) • Experience building or maturing an AppSec program from early stages (nice to have) • SOAR automation and scripting experience (nice to have) • Experience in a PCI-compliant environment with annual reporting needs (nice to have)

🏖️ Benefits

• Considerable employer contributions for health, dental, and vision programs • Generous PTO, paid holidays, and paid parental leave • 401(k) matching program • Merit advancement opportunities • Career development & training • Annual bonus eligibility • Uplifting, collaborative work environment • Community, connection, and belonging across the organization