Staff Security Engineer - Secure Cloud & Apps Design

Beyond Finance; United States; Remote; USD 160,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Beyond Finance is seeking a Staff Security Engineer to embed security into our architecture and processes across Product and Software Engineering teams. You will participate early in design and build, guiding secure design and code reviews for web and mobile apps and managing core AppSec tooling.

This hands-on role requires deep expertise in one security domain with working knowledge of others, and a proactive, independent approach to delivering secure, scalable solutions within CI/CD and cloud

Qualifications

• 8+ years of hands-on security engineering experience.
• Strong depth in one area (application security, cloud security, or security automation) with knowledge of the other two.
• Working knowledge of threat modeling.
• Ability to operate independently and drive projects without day-to-day oversight.

Responsibilities

• Partner with Engineering, DevOps, and Product to provide security input at design and build phases.
• Guide secure design and code reviews for web and mobile apps; manage core AppSec tooling (SAST/DAST/ASM).
• Triages and remediates application-level vulnerabilities with engineering teams.
• Contribute to cloud security posture across AWS (IAM, networking, containers, CNAPP)
• Support cloud and application vulnerability management and tune WAF rules as needed.
• Build automation and internal tooling (primarily in Python) to reduce manual work.
• Contribute to security log pipelines, SIEM detections, and endpoint security controls.
• Integrate security checks (scanning, secrets detection) into CI/CD pipelines with DevOps.

Skills

Security engineering

Threat modeling

Independent work

Multi-domain awareness

Tools

SAST tooling

DAST tooling

Secret scanning

CNAPP

AWS tooling

Terraform

Job description

Beyond Finance is seeking a Staff Security Engineer to embed security into our architecture and processes across Product and Software Engineering teams. You will participate early in design and build, guiding secure design and code reviews for web and mobile apps and managing core AppSec tooling.

This hands-on role requires deep expertise in one security domain with working knowledge of others, and a proactive, independent approach to delivering secure, scalable solutions within CI/CD and cloud