From the listing
About the role
Beyond Finance is on a mission to help everyday Americans escape the cycle of debt through compassionate care, user-centric technology, and customized financial solutions. We have helped over 1 million clients on their path to a brighter future.
As a Staff Security Engineer, you will embed security into architecture and processes by partnering early with Product and Software Engineering teams. You will be a hands-on technical lead capable of influencing outcomes across application security, cloud security, and security automation.
What you'll do
- Partner with Engineering, DevOps, and Product to provide security input at any phase of design or build.
- Guide secure design and code review for web and mobile applications and manage core AppSec tooling.
- Triage and remediate application-level vulnerabilities with engineering teams.
- Contribute to cloud security posture across the AWS environment using CNAPP and AWS-native tooling.
- Support cloud and application vulnerability management and tune WAF rules.
- Build automation and internal tooling in Python to reduce manual work.
- Contribute to security log pipelines, SIEM detections, and endpoint security controls.
- Embed security checks like scanning and secrets detection into CI/CD pipelines.
- Develop secure development and infrastructure standards and playbooks.
What they're looking for
- 8+ years of hands-on security engineering experience.
- Strong depth in one of: application security, cloud security, or security automation and tooling.
- Working knowledge of threat modeling.
- Ability to operate independently and drive projects without day-to-day oversight.
Nice to have
- Expertise across multiple domains (AppSec, Cloud Security, Automation).
- Hands-on Infrastructure as Code experience, ideally Terraform.
- Red teaming or offensive security experience.
- PCI-regulated or financial services environment experience.
- Mobile application security experience.
- AI/ML security exposure including prompt injection and data poisoning controls.
- Identity security across human and non-human identities.
- Development experience with Ruby on Rails, Python, or Go.
From the company page
Beyond Finance benefits
◉ Remote policy · in their words
“We offer a choice between hybrid, remote and in-office work models so you can be where you feel you’ll be the most productive and happy. We trust you to know what’s best for you.”
Pulled from their careers page · verified by Atlas
The hot takeJeff's read on Beyond Finance
Jeff hasn't written this one up yet.
Ask, and Beyond Finance jumps the queue.