First App Security Architect & Strategy Lead

Beacon

San Francisco (CA)

On-site

USD 180,000 - 240,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Beacon is seeking its first dedicated Application Security Engineer to set the strategy for product security and begin building a comprehensive program across Beacon and portfolio companies. You will embed with engineering teams, own the technical roadmap for product security, and influence design reviews and planning at Beacon HQ or portfolio sites.

You will lead secure design, threat modeling, and security architecture reviews, and drive standards for authentication, authorization, encryption,

Qualifications

Expert knowledge of web security and API security.
Experience designing authentication and authorization systems (RBAC/ABAC).
Applied cryptography fundamentals for secure data in transit and at rest.
Experience securing cloud environments and containerized workloads.
Ability to ship production code and author fixes, not only specify them.

Responsibilities

Lead threat modeling and security architecture reviews for new products and platforms.
Define standards for authentication, authorization, encryption, and tenant isolation.
Own product security review for acquisitions and cloud environments; establish posture and remediation path.
Perform secure code reviews focused on authorization and business logic flaws.
Manage vulnerability program end-to-end, including SLAs and remediation with engineering teams.
Build tooling and CI/CD integration for SAST, DAST, SCA, and secrets scanning.