Staff Security Engineer — Secure Platform & Cloud

Beyond Finance; United States; On-site; USD 160,000 - 195,000; Full time

Benefits offered by this job

Health, dental, and vision program

Generous PTO and paid holidays

401(k) matching program

Merit advancement opportunities

Career development & training

Job summary

Beyond Finance seeks a Staff Security Engineer to partner with Product and Software Engineering teams to embed security into architecture and processes as they design, build, and ship.

This hands-on role requires deep expertise in at least one area—application security, cloud security, or security automation—with working knowledge of the others, and a focus on threat modelling. You’ll help secure web and mobile apps, cloud infrastructure, and CI/CD pipelines across the organization.

Qualifications

• 8+ years of hands-on security engineering experience.
• Strong depth in one of: application security, cloud security, or security automation and tooling, with working knowledge of the other two.
• Working knowledge of threat modelling.
• Operates independently and drives projects without day-to-day oversight.

Responsibilities

• Partner with Engineering, DevOps, and Product across projects, providing security input at any phase of design or build, regardless of domain.
• Guide secure design and code review for web and mobile applications, and help manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM, and mobile security tooling).
• Help triage and remediate application-level vulnerabilities with engineering teams.
• Contribute to cloud security posture across the AWS environment, including IAM, network segmentation, container security, secrets, and data exposure, using CNAPP and AWS-native tooling.
• Support cloud and application vulnerability management, and help tune WAF rules as needed.
• Build automation and internal tooling, primarily in Python, that reduces manual work for the security team.
• Contribute to security log pipelines, SIEM detections, and endpoint security controls.
• Help embed security checks, such as scanning and secrets detection, into CI/CD pipelines in partnership with DevOps.
• Contribute to secure development and infrastructure standards, playbooks, and enablement materials used across engineering.

Job description

Beyond Finance seeks a Staff Security Engineer to partner with Product and Software Engineering teams to embed security into architecture and processes as they design, build, and ship.

This hands-on role requires deep expertise in at least one area—application security, cloud security, or security automation—with working knowledge of the others, and a focus on threat modelling. You’ll help secure web and mobile apps, cloud infrastructure, and CI/CD pipelines across the organization.