AppSec Lead: Secure DevOps & Cloud Engineering

Beyond Finance; United States; Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

PTO, holidays, and parental leave

401(k) matching

Job summary

Beyond Finance seeks an Application Security Engineer to own and drive AppSec across the product portfolio. You’ll partner with engineering teams to embed secure development, strengthen CI/CD security, and shape security at design and feature levels.

You’ll lead tooling and automation with SAST/DAST, WAFs, and cloud security in AWS, while mentoring engineers and guiding risk-based decision making. Eligible for annual bonus and competitive salary.

Qualifications

• 3-7+ years of experience in Application Security or related engineering roles.
• Strong understanding of secure coding practices, common vulnerabilities (OWASP Top 10), and modern SDLC.
• Experience working with cloud-native applications, ideally in AWS.
• Understanding of SSL certificates & cryptographic key management.
• Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools.
• Ability to partner effectively with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Lead and evolve the company's application security strategy, roadmap, and day-to-day operations.
• Serve as the primary AppSec partner for development teams across Ruby on Rails, React Native, Python, and Go projects.
• Provide security guidance during design, development, and code review for new features and projects.
• Drive adoption of secure coding practices and threat-modeling across engineering teams.

Skills

Secure coding practices

OWASP Top 10

SDLC

AWS cloud experience

Key management / SSL

SAST

DAST

WAFs

GitHub workflows

CI/CD integration

Tools

GitHub Advanced Security

Invicti

Hadrian

Job description

Beyond Finance seeks an Application Security Engineer to own and drive AppSec across the product portfolio. You’ll partner with engineering teams to embed secure development, strengthen CI/CD security, and shape security at design and feature levels.

You’ll lead tooling and automation with SAST/DAST, WAFs, and cloud security in AWS, while mentoring engineers and guiding risk-based decision making. Eligible for annual bonus and competitive salary.