RemoteLeaf Logo
Log in Sign up

Staff Security Engineer

1 month ago
United States
Full-time
Lead
Security Engineer
Cybersecurity
AWS CI/CD Go Python Ruby on Rails Secrets Management SIEM Terraform WAF
Apply Now
Beyond Finance

Beyond Finance

Beyond Finance is a next generation FinTech company with offices in Chicago, Houston, and San Diego. They offer simple and transparent financial products customized to clients' individual circumstances. Their objective is to provide personalized financ...

Banks
251-1K
Founded 2016
$805M raised
View All Jobs 5

Description

  • Partner with Engineering, DevOps, and Product to provide security input throughout design and build phases.
  • Guide secure design and code review for web and mobile applications.
  • Manage and improve core application security tooling, including SAST, SCA, secret scanning, DAST, ASM, and mobile security tools.
  • Triage and help remediate application-level vulnerabilities with engineering teams.
  • Contribute to cloud security posture across AWS, including IAM, network segmentation, container security, secrets, and data exposure.
  • Support cloud and application vulnerability management and help tune WAF rules.
  • Build automation and internal tooling, primarily in Python, to reduce manual security work.
  • Contribute to security log pipelines, SIEM detections, and endpoint security controls.
  • Embed security checks such as scanning and secrets detection into CI/CD pipelines.
  • Help develop secure development and infrastructure standards, playbooks, and enablement materials.

Requirements

  • 8+ years of hands-on security engineering experience.
  • Strong depth in one of application security, cloud security, or security automation and tooling.
  • Working knowledge of the other two security areas beyond your primary specialty.
  • Working knowledge of threat modeling.
  • Ability to operate independently and drive projects without day-to-day oversight.
  • Deeper experience in application security, cloud security, or security automation is preferred.
  • Hands-on infrastructure as code experience, ideally Terraform, is preferred.
  • Red teaming or offensive security experience is preferred.
  • PCI-regulated or financial services environment experience is preferred.
  • Mobile application security experience is preferred.
  • AI/ML security exposure, including prompt injection, data poisoning, model abuse, and mitigations, is preferred.
  • Identity security experience across human and non-human identities is preferred.
  • Development experience with Ruby on Rails, Python, Go, or similar languages is preferred.

Benefits

  • Base salary range of $160,000 to $195,000 USD.
  • Eligible for additional incentives, including an annual bonus.
  • Employer contributions for health, dental, and vision coverage.
  • Generous PTO, paid holidays, and paid parental leave.
  • 401(k) matching program.
  • Merit advancement opportunities.
  • Career development and training.
  • Collaborative work environment with a strong sense of community and belonging.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Raya

DevSecOps Engineer

Raya 51-250 Internet Software & Services

Raya is hiring a DevSecOps Engineer to evolve its multi-regional infrastructure platform, delivering secure, reliable, scalable systems that enable product engineering teams to innovate confidently.

Anywhere Full-time Senior DevOps Engineer Security Engineer
Ansible AWS Azure Bash CI/CD Datadog Docker Elasticsearch GCP Go Grafana Kubernetes MongoDB Network Security Node.js PostgreSQL Prometheus Pulumi Python Redis Ruby Terraform
3 hours, 33 minutes ago
JumpCloud

Senior Software Engineer - Privileged Access Management (PAM / IAM)- India

JumpCloud 251-1K Internet Software & Services

JumpCloud is hiring a remote Senior/Lead Software Engineer to evolve its core AI-powered IT management platform through secure, scalable architecture, enterprise PAM integration, reliable delivery, and AI-assisted engineering practices.

India Full-time Lead Security Engineer Software Engineer
Agile AWS C# Docker Go gRPC HashiCorp Vault Kubernetes Linux macOS Microservices .NET Playwright PostgreSQL REST API SQL Server TypeScript
3 hours, 33 minutes ago
VEIC

Information Security Engineer II

VEIC 251-1K Professional Services

VEIC is seeking an Information Security Engineer II to operate its blue-team security program by responding to incidents, engineering security technologies, and strengthening controls across company systems.

United States Full-time Mid Level Security Engineer
$90k-$100k
Linux PowerShell Python SIEM Splunk TCP/IP
3 hours, 48 minutes ago
Caseware

Security Senior Software Developer

Caseware 251-1K Internet Software & Services

Caseware is hiring a Senior Software Developer III in Colombia to provide technical leadership while designing, operating, and evolving its cloud accounting and audit software platform.

Colombia Full-time Lead Security Engineer Software Engineer
AWS AWS CDK Azure C++ CI/CD Docker Encryption GCP GitHub GraphQL Java JIRA JUnit Kubernetes Microservices New Relic PostgreSQL REST API Spring Boot Terraform
4 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers