RemoteLeaf Logo
Log in Sign up

Staff Application Security Engineer

2 months ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS CI/CD CloudFormation Go Python React Native Ruby on Rails Secrets Management Terraform
Apply Now
Beyond Finance

Beyond Finance

Beyond Finance is a next generation FinTech company with offices in Chicago, Houston, and San Diego. They offer simple and transparent financial products customized to clients' individual circumstances. Their objective is to provide personalized financ...

Banks
251-1K
Founded 2016
$805M raised
View All Jobs 4

Description

  • Lead and evolve the application security strategy, roadmap, and day-to-day operations.
  • Serve as the primary AppSec partner for development teams across web, mobile, Python, and Go projects.
  • Provide security guidance during design, development, and code review for new features and services.
  • Drive adoption of secure coding practices and threat modeling across engineering teams.
  • Manage and optimize AppSec tooling, including SAST, DAST, ASM, mobile security, and WAF solutions.
  • Improve automation and integration of security tools into CI/CD pipelines.
  • Build and maintain secure development standards, playbooks, and training materials.
  • Partner with engineering teams during sprint planning and feature design to identify and reduce risk early.
  • Conduct security reviews, code assessments, and vulnerability triage with development teams.
  • Work with DevOps to secure AWS deployments, configurations, and CI/CD workflows.

Requirements

  • 8+ years of experience in Application Security, Product Security, or related engineering roles.
  • Strong understanding of secure coding practices, the OWASP Top 10, and modern SDLC practices.
  • Experience working with cloud-native applications, ideally in AWS.
  • Understanding of SSL certificates and cryptographic key management.
  • Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools.
  • Ability to partner effectively with developers and influence secure design decisions.
  • Familiarity with GitHub-based workflows and CI/CD pipelines.
  • Development experience with Ruby on Rails or similar dynamic languages (nice to have).
  • Knowledge of AWS ECS/EKS, container security, secrets management, and infrastructure as code such as CloudFormation or Terraform (preferred).
  • Experience building or maturing an AppSec program from early stages, SOAR automation and scripting experience, or PCI-compliance exposure (preferred).

Benefits

  • Base salary range of $160,000 to $195,000 USD.
  • Eligible for additional incentives, including an annual bonus.
  • Considerable employer contributions for health, dental, and vision coverage.
  • Generous PTO, paid holidays, and paid parental leave.
  • 401(k) matching program.
  • Merit advancement opportunities.
  • Career development and training.
  • Collaborative, community-oriented work environment.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Coforge

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Peru Mid Level Application Security Engineer
Azure Git GitHub
5 hours, 55 minutes ago
Trail of Bits

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

United States Full-time Junior Application Security Engineer
$140k-$180k
Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
6 hours, 25 minutes ago
Quanata

Staff Security Engineer [Remote-US]

Quanata 201-500 information technology & services

Quanata, LLC is seeking a Staff Security Engineer to secure AI-enabled systems, applications, cloud infrastructure, and platforms while shaping security standards and initiatives across the organization.

United States Full-time Lead Application Security Engineer
$290k-$400k
AWS CI/CD Cybersecurity DevSecOps Docker Generative AI GitHub Actions Go Java JavaScript Jenkins Kubernetes Machine Learning Python Secrets Management SIEM Terraform TypeScript
1 day, 6 hours ago
Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers