RemoteLeaf Logo
Log in Sign up

Staff Application Security Engineer

1 month, 1 week ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS CI/CD CloudFormation Go Python React Native Ruby on Rails Secrets Management Terraform
Apply Now
Beyond Finance

Beyond Finance

Beyond Finance is a next generation FinTech company with offices in Chicago, Houston, and San Diego. They offer simple and transparent financial products customized to clients' individual circumstances. Their objective is to provide personalized financ...

Banks
251-1K
Founded 2016
$805M raised
View All Jobs 5

Description

  • Lead and evolve the application security strategy, roadmap, and day-to-day operations.
  • Serve as the primary AppSec partner for development teams across web, mobile, Python, and Go projects.
  • Provide security guidance during design, development, and code review for new features and services.
  • Drive adoption of secure coding practices and threat modeling across engineering teams.
  • Manage and optimize AppSec tooling, including SAST, DAST, ASM, mobile security, and WAF solutions.
  • Improve automation and integration of security tools into CI/CD pipelines.
  • Build and maintain secure development standards, playbooks, and training materials.
  • Partner with engineering teams during sprint planning and feature design to identify and reduce risk early.
  • Conduct security reviews, code assessments, and vulnerability triage with development teams.
  • Work with DevOps to secure AWS deployments, configurations, and CI/CD workflows.

Requirements

  • 8+ years of experience in Application Security, Product Security, or related engineering roles.
  • Strong understanding of secure coding practices, the OWASP Top 10, and modern SDLC practices.
  • Experience working with cloud-native applications, ideally in AWS.
  • Understanding of SSL certificates and cryptographic key management.
  • Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools.
  • Ability to partner effectively with developers and influence secure design decisions.
  • Familiarity with GitHub-based workflows and CI/CD pipelines.
  • Development experience with Ruby on Rails or similar dynamic languages (nice to have).
  • Knowledge of AWS ECS/EKS, container security, secrets management, and infrastructure as code such as CloudFormation or Terraform (preferred).
  • Experience building or maturing an AppSec program from early stages, SOAR automation and scripting experience, or PCI-compliance exposure (preferred).

Benefits

  • Base salary range of $160,000 to $195,000 USD.
  • Eligible for additional incentives, including an annual bonus.
  • Considerable employer contributions for health, dental, and vision coverage.
  • Generous PTO, paid holidays, and paid parental leave.
  • 401(k) matching program.
  • Merit advancement opportunities.
  • Career development and training.
  • Collaborative, community-oriented work environment.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

JumpCloud

Senior Mobile Software Engineer (iOS / Android), Identity & Security - India

JumpCloud 251-1K Internet Software & Services

JumpCloud is hiring a Senior Mobile Software Engineer to build secure native iOS and Android applications that protect enterprise identities through authentication, password management, and identity verification.

India Full-time Senior Application Security Engineer Mobile Engineer
Android AWS CI/CD Encryption Espresso GCP GitHub Actions Go iOS Kotlin OpenID Connect REST API Swift WebSockets XCTest
4 hours, 18 minutes ago
Bitly

Staff Application Security Engineer (R5949)

Bitly 51-250 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to establish and scale a developer-centered secure software development and software supply-chain security program across its defense-technology engineering organization.

Anywhere Full-time Lead Application Security Engineer
$143k-$214k
Burp Suite DevSecOps Kubernetes Microservices SonarQube
4 hours, 48 minutes ago
Bugcrowd

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a remote Application Security Engineer to triage and validate vulnerability submissions for large-scale bug bounty programs while coordinating with clients and security researchers.

Brazil Mid Level Application Security Engineer
Burp Suite Nmap
1 day, 3 hours ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is hiring a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices across the product lifecycle.

United States Full-time Senior Application Security Engineer
$182k-$228k
CI/CD DevSecOps Encryption Java JavaScript Kubernetes Python SAML Secrets Management TLS
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers