Staff Security Engineer

Job Overview

At Beyond Finance , we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future.

Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.

Job Description

While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level!

If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.

You'll also be someone the Security team can pull into any project, at any phase and regardless of domain, to make sure it lands on the right security outcome.

This is a hands-on role, and you don't need to be an expert in all three areas: application security, cloud security, and security automation and tooling.

Guide secure design and code review for web and mobile applications, and help manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM, and mobile security tooling). Help triage and remediate application-level vulnerabilities with engineering teams.

Key Responsibilities

• Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.
• Role Overview As a Staff Security Engineer, you'll get involved early with Product and Software Engineering teams to embed security into our architecture and processes as they design, build, and ship.
• What You'll Do Partner with Engineering, DevOps, and Product across projects, providing security input at any phase of design or build, regardless of domain.
• Guide secure design and code review for web and mobile applications, and help manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM, and mobile security tooling).
• Support cloud and application vulnerability management, and help tune WAF rules as needed.
• Build automation and internal tooling, primarily in Python, that reduces manual work for the security team.
• Nice to Have Deeper expertise across more than one of the following: application security (SAST/DAST/ASM tooling, secure SDLC), cloud security (AWS IAM, networking, container orchestration, CNAPP-driven posture management), or security automation (Python tooling, log pipelines, SIEM detection engineering).
• Given an ambiguous problem, they identify the highest-impact piece and start working on it rather than waiting for a fully scoped ticket, and they'd rather deliver a partial fix now and improve it over time than spend months on the perfect design.

Required Skills and Qualifications

• You should have strong, demonstrated depth in one of the three, along with enough working knowledge of the other two to contribute without hand-holding and to be a trusted voice on technical decisions outside the systems you personally own.
• What We're Looking For Requirements 8+ years of hands-on security engineering experience.
• Strong, demonstrated depth in one of the following, with working knowledge of the other two: application security, cloud security, or security automation and tooling.
• Working knowledge of threat modeling.
• Hands-on Infrastructure as Code experience, ideally Terraform.
• Red teaming or offensive security experience.
• PCI-regulated or financial services environment experience.
• Mobile application security experience.

Benefits and Perks

• Competitive compensation, benefits, and growth opportunities.
• This role is eligible for additional incentives, including an annual bonus.
• While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us.
• For eligible full-time employees, we offer: Considerable employer contributions for health, dental, and vision programs Generous PTO, paid holidays, and paid parental leave 401(k) matching program Merit advancement opportunities Career development & training And finally, our team spirit and culture!

Work Location and Schedule

This role is listed as Remote USA with location information shown as Remote USA. The employment type is Full Time.

About the Company

Beyond Finance is the organization connected with this listing. USA Jobs Today displays this opportunity for job discovery only, so applicants should verify company details, application instructions, and eligibility on the official employer website.