Senior Application Security Engineer

Imagine a career where your technical prowess directly safeguards the financial journey of countless individuals. At Beyond Finance, we are not just building software; we are creating pathways out of debt, helping everyday Americans achieve stability and hope. As our Senior Application Security Engineer, you will not just be part of this vital mission, you will be at its forefront, ensuring every digital interaction is secure, trustworthy, and compliant. This is not just another security role, it is a chance to truly own and drive our application security posture across our entire tech stack, making a profound impact on both our product and our clients' lives.

Overview

We are searching for a passionate and experienced Senior Application Security Engineer to be the primary owner and driver of our application security program. This is a fully remote, global opportunity, allowing you to contribute from anywhere in the world. You will work hands-on with our engineering teams, embedding secure development practices, improving tooling and automation, and guiding critical security considerations for new features, architectures, and services. This is a high impact role, offering you the chance to shape the future of AppSec at a company that values security as a core part of product quality and its ethical foundation.

Key Responsibilities

Lead Application Security: Drive the strategy, development, and execution of our comprehensive application security program.
Secure Development Lifecycle (SDLC) Integration: Collaborate closely with development teams to integrate security best practices throughout the entire software development lifecycle, from design to deployment.
Security Reviews and Threat Modeling: Conduct thorough security architecture reviews, perform threat modeling, and provide actionable security guidance for new and existing applications.
Vulnerability Management: Identify, triage, and manage application security vulnerabilities, working with engineering teams to ensure timely remediation.
Tooling and Automation: Evaluate, implement, and optimize application security tools, including SAST, DAST, SCA, and WAF solutions, automating security checks where possible.
Security Training and Mentorship: Develop and deliver security awareness training for engineers, fostering a strong security culture and mentoring junior team members.
Incident Response: Contribute to application security incident response efforts, providing expertise during security incidents.
Compliance and Policy: Help define and enforce application security policies and standards, ensuring compliance with relevant regulations and industry best practices.

Requirements

Extensive professional experience, typically 5+ years, specifically focused on application security engineering.
Demonstrated expertise in building and scaling application security programs within a fast paced, agile environment.
Deep understanding of web application security vulnerabilities, attack vectors, and defensive techniques (e.g., OWASP Top 10).
Hands on experience with various application security testing tools and methodologies (SAST, DAST, IAST, SCA, penetration testing).
Proficiency in at least one modern programming language (e.g., Python, Go, Java, C#, JavaScript).
Strong knowledge of cloud security principles and practices, particularly within AWS or similar major cloud providers.
Familiarity with containerization technologies (Docker, Kubernetes) and microservices architectures.
Excellent communication skills, with the ability to articulate complex security concepts to both technical and non technical audiences.
Proven ability to influence and collaborate across multiple engineering teams.
Relevant security certifications (e.g., CISSP, CSSLP, GWAPT) are a plus.

What You'll Gain

The opportunity to lead and truly own the application security program for a company making a tangible difference in people's lives.
Work in a collaborative, supportive, and ethical environment focused on helping others.
Access to cutting edge technologies and resources to drive innovation in application security.
Significant professional growth opportunities within a rapidly expanding organization.
A competitive compensation package and comprehensive benefits, tailored to our global remote workforce.
The chance to make a direct, positive impact on over a million clients.