Staff AppSec Engineer: Lead Secure Dev & Cloud

Beyond Finance; United States; Remote; USD 160,000 - 195,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Generous PTO & holidays

Parental leave

Job summary

Beyond Finance is seeking a Staff Application Security Engineer to own the AppSec program and drive secure development across our engineering org. You will partner with teams building Ruby on Rails web apps, React Native mobile apps, and services in Python and Go, embedding security into design and code reviews.

You will guide threat modeling, automate security tooling, and collaborate with DevOps on secure AWS deployments and CI/CD workflows; a strong focus on risk reduction and secure

Qualifications

• 8+ years of experience in Application Security, Product Security, or related engineering roles.
• Strong understanding of secure coding practices, common vulnerabilities (OWASP Top 10), and modern SDLC.
• Experience with cloud-native applications, ideally in AWS.
• Understanding of SSL certificates and cryptographic key management.
• Hands-on experience with SAST, DAST, WAFs, and/or mobile app security tools.
• Ability to partner effectively with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Own and evolve the application's security program and roadmap; drive security governance.
• Partner with multiple dev teams on Ruby on Rails, React Native, Python, and Go projects to embed secure practices.
• Provide security guidance during design, development, and code reviews for new features.
• Lead threat modeling and secure coding training; triage vulnerabilities with engineering teams.

Skills

8+ years AppSec

Secure coding practices

OWASP Top 10

AWS cloud security

SSL certificate mgmt

DevSecOps collaboration

GitHub CI/CD

Tools

SAST

DAST

WAFs

Mobile app security tools

GitHub workflows

CI/CD pipelines

Job description

Beyond Finance is seeking a Staff Application Security Engineer to own the AppSec program and drive secure development across our engineering org. You will partner with teams building Ruby on Rails web apps, React Native mobile apps, and services in Python and Go, embedding security into design and code reviews.

You will guide threat modeling, automate security tooling, and collaborate with DevOps on secure AWS deployments and CI/CD workflows; a strong focus on risk reduction and secure