Senior Application Security Engineer

About the role

As the Application Security Engineer, you will be the primary owner and driver of the company's application security program. You will work hands-on with engineering teams to embed secure development practices, improve tooling and automation, and guide security considerations for new features, architectures, and services.

Responsibilities

• Lead and evolve the company's application security strategy, roadmap, and day-to-day operations.
• Serve as the primary AppSec partner for development teams working on web and mobile applications.
• Manage and optimize AppSec tooling including SAST, DAST, and WAF solutions.
• Improve automation and integration of security tools into CI/CD pipelines.
• Partner with engineering teams during sprint planning and feature design to proactively address risks.
• Lead or support investigation and remediation of application-level vulnerabilities.

Required skills

• Application Security
• Product Security
• Secure coding
• OWASP Top 10
• SDLC
• AWS
• SSL certificates
• Cryptographic key management
• SAST
• DAST
• WAF
• Mobile application security
• GitHub
• CI/CD

Nice to have

• Ruby on Rails
• AWS ECS
• AWS EKS
• Container security
• Secrets management
• Infrastructure-as-code
• CloudFormation
• Terraform
• SOAR
• Scripting

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Generous PTO
• Paid holidays
• Paid parental leave
• 401(k) matching
• Merit advancement opportunities
• Career development & training

About the Company

Beyond Finance is a forward-thinking organization dedicated to helping everyday Americans escape the cycle of debt through compassionate, individualized care and customized financial solutions. They focus on compliance, ethics, and user-centric technology to support over 1 million clients.