Staff AppSec Engineer — Lead Secure SDLC & Tooling

Beyond Finance; United States; Remote; USD 160,000 - 195,000; Full time

Job summary

Beyond Finance is seeking an experienced Staff Application Security Engineer to own and drive our application security program across multiple engineering teams, including Ruby on Rails and React Native projects. You will embed secure development practices, improve tooling, and guide security considerations for new features and architectures.

You will lead secure SDLC efforts, enable developers with secure design guidance, and collaborate with DevOps on secure AWS deployments.

Qualifications

• 8+ years of experience in Application Security, Product Security, or related engineering roles.
• Strong understanding of secure coding practices, OWASP Top 10, and modern SDLC.
• Experience with cloud-native applications, ideally AWS.
• Understanding of SSL certificates & cryptographic key management.
• Hands-on experience with SAST, DAST, WAFs, and/or mobile app security tools.
• Ability to partner effectively with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Lead and evolve the company’s application security strategy, roadmap, and day‑to‑day operations.
• Serve as the primary AppSec partner for multiple dev teams (Ruby on Rails, React Native, Python, Go).
• Provide security guidance during design, development, and code review for new features and projects.
• Drive adoption of secure coding practices and threat-modeling across engineering teams.
• Manage and optimize AppSec tooling and automation across CI/CD pipelines.
• Build secure development standards, playbooks, and training materials.
• Lead or support incident response and vulnerability remediation processes.

Skills

AppSec experience

Secure coding (OWASP Top 10)

AWS cloud security

CI/CD security

SAST/DAST/WAFs

GitHub workflows

Key management & SSL

Tools

GitHub Advanced Security

Invicti

Hadrian

AppDome

Cloudflare WAF

Job description

Beyond Finance is seeking an experienced Staff Application Security Engineer to own and drive our application security program across multiple engineering teams, including Ruby on Rails and React Native projects. You will embed secure development practices, improve tooling, and guide security considerations for new features and architectures.

You will lead secure SDLC efforts, enable developers with secure design guidance, and collaborate with DevOps on secure AWS deployments.