Staff Cloud Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $160k - $195k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Beyond Finance

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💸 Finance

💳 Fintech

👥 B2C

💰 $110M Debt Financing on 2021-02

Finance • Fintech • B2C

Beyond Finance is a financial services company that offers debt consolidation and management solutions to help individuals move beyond debt. They provide personalized options to reduce fees and interest, and aim to cut monthly payments for enrolled debts by 40% or more. Beyond Finance assists clients through a structured program designed to eliminate debt typically within 24 to 48 months, utilizing an easy-to-use mobile app for program management. Despite the potential impacts on credit scores, their services have positively impacted over 700,000 clients, offering consolidation loans ranging from $1,000 to $100,000. They also focus on customer satisfaction, receiving high ratings on platforms such as Trustpilot.

📋 Description

• Harden the security posture of the AWS environment and software development pipeline • Own cloud security posture across AWS using Wiz and AWS-native services, reducing risk across IAM, network segmentation, container security, secrets, and data exposure • Establish secure defaults in Infrastructure as Code through reusable modules, guardrails, and policy as code • Harden CI/CD pipelines in partnership with DevOps • Run vulnerability management across cloud and application findings, including intake, prioritization, SLA tracking, and remediation • Build scalable automation for ingestion, deduplication, prioritization, and developer-facing workflows • Instrument telemetry, alerting, and runbooks for owned systems • Operate and tune the WAF, including managed and custom rules, rate limiting, and bot mitigation • Partner with DevOps, Engineering, and the Application Security Engineer on preventative controls and application security work

🎯 Requirements

• 8+ years of hands-on security engineering across cloud security and vulnerability management • Strong AWS security background, including IAM, networking, container orchestration, and logging and audit • Hands-on experience securing CI/CD pipelines and Infrastructure as Code • Terraform required • Experience running or substantially contributing to a vulnerability management program • Working knowledge of OWASP Top 10 and threat modeling • Experience with Wiz, Cloudflare, GitHub Advanced Security, Spacelift, or AWS-native services is nice to have • Production WAF experience is nice to have • AI/ML security exposure is nice to have • Experience with secrets management platforms is nice to have • Identity security experience is nice to have • PCI-regulated or financial services experience is nice to have • Familiarity with Ruby on Rails, Python, or Go is nice to have • Ability to operate independently and drive projects without day-to-day oversight

🏖️ Benefits

• Considerable employer contributions for health, dental, and vision programs • Generous PTO, paid holidays, and paid parental leave • 401(k) matching program • Merit advancement opportunities • Career development & training • Annual bonus eligibility