Lead Application Security Engineer: Build Safer Apps & Pipelines

Beyond Finance; Chicago (IL); On-site; USD 140,000 - 165,000; Full time

Benefits offered by this job

Health, dental, vision benefits

PTO and paid holidays

Parental leave

401(k) matching

Job summary

Beyond Finance is seeking an Application Security Engineer to own and drive our application security program. You will partner with engineering teams to embed secure development practices, improve tooling, and guide security for new features and architectures.

This high-impact role requires hands-on work with Ruby on Rails, React Native, Python, and Go projects, with a focus on threat modeling and cross-functional collaboration to raise our security posture across the SDLC.

Qualifications

• 3-7+ years of Application Security, Product Security, or related engineering roles.
• Strong secure coding practices, OWASP Top 10, and modern SDLC knowledge.
• Experience with cloud-native apps, ideally AWS.
• Understanding of SSL certificates and cryptographic key management.
• Hands-on with SAST, DAST, WAFs, and mobile app security tools.
• Ability to collaborate with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Lead and evolve the application security strategy, roadmap, and day-to-day operations.
• Partner with multiple dev teams on Rails, React Native, Python, and Go security.
• Provide security guidance during design, development, and code review.
• Drive secure coding practices and threat modeling across engineering teams.
• Manage and optimize AppSec tooling and CI/CD integration.
• Conduct security reviews, code assessments, and vulnerability triage with developers.

Skills

AppSec

Secure SDLC

AWS

SAST/DAST

GitHub CI/CD

Cryptography

Vulnerability mgmt

Tools

GitHub Actions

Job description

Beyond Finance is seeking an Application Security Engineer to own and drive our application security program. You will partner with engineering teams to embed secure development practices, improve tooling, and guide security for new features and architectures.

This high-impact role requires hands-on work with Ruby on Rails, React Native, Python, and Go projects, with a focus on threat modeling and cross-functional collaboration to raise our security posture across the SDLC.