Remote Staff Security Engineer — AppSec, Cloud & Automation

Userc Dehradun; Northern (KY); Híbrido; USD 160 000 - 195 000; Tempo integral

Resumo da oferta

Beyond Finance is seeking a Staff Security Engineer to partner with product and software teams to embed security into architecture and processes across design, build, and ship stages. You will be a trusted voice for security decisions and drive secure outcomes in a hands-on role.

The role focuses on application security, cloud security, and security automation, with involvement across AWS, CI/CD, and security tooling. A strong contributor who can lead security initiatives is ideal.

Qualificações

• 8+ years of hands-on security engineering experience.
• Strong depth in one of: application security, cloud security, or security automation and tooling.
• Working knowledge of threat modeling.

Responsabilidades

• Partner with Engineering, DevOps, and Product to provide security input at design or build phases.
• Guide secure design and code review for web and mobile apps; manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM).
• Triage and remediate application-level vulnerabilities with engineering teams.
• Contribute to cloud security posture across AWS (IAM, networking, containers, secrets).
• Support vulnerability management and tune WAF rules as needed.
• Build automation and internal tooling (Python) to reduce manual work for security.
• Contribute to security log pipelines, SIEM detections, and endpoint controls.
• Embed security checks into CI/CD pipelines with DevOps.

Conhecimentos

Threat modeling

Application security

Cloud security

Security automation

Python scripting

Infra as Code

Go/Ruby/Python development

Ferramentas

Terraform

AWS

SAST

DAST

CI/CD tooling

Secret scanning

WAF tuning

Descrição da oferta de emprego

Beyond Finance is seeking a Staff Security Engineer to partner with product and software teams to embed security into architecture and processes across design, build, and ship stages. You will be a trusted voice for security decisions and drive secure outcomes in a hands-on role.

The role focuses on application security, cloud security, and security automation, with involvement across AWS, CI/CD, and security tooling. A strong contributor who can lead security initiatives is ideal.