Staff Application Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Application Security Engineer owning AppSec strategy, tooling, and secure SDLC practices. Protecting Beyond Finance’s debt-relief fintech products across applications, cloud infrastructure, and CI/CD.
Responsibilities:
- Lead and evolve the company's application security strategy, roadmap, and day-to-day operations
- Serve as the primary AppSec partner for development teams working on Ruby on Rails web apps, React Native mobile apps, Python, and Go projects
- Provide security guidance during design, development, and code review
- Drive secure coding practices and threat modeling across engineering teams
- Manage and optimize GitHub Advanced Security, Invicti, Hadrian, AppDome, and Cloudflare WAF
- Improve security-tool automation and CI/CD integration
- Build secure development standards, playbooks, and training materials
- Partner with engineering during sprint planning and feature design to address risks proactively
- Conduct security reviews, code assessments, and vulnerability triage
- Work with DevOps on secure AWS infrastructure deployments and configurations
- Harden ECS, IAM, networking, and supporting cloud services
- Design and maintain secure CI/CD workflows
- Lead or support investigation and remediation of application-level vulnerabilities
- Monitor, prioritize, and track SAST, DAST, and ASM findings
- Collaborate with engineering on timely and effective remediation
Requirements:
- 8+ years of experience in Application Security, Product Security, or related engineering roles
- Strong understanding of secure coding practices, OWASP Top 10, and modern SDLC
- Experience with cloud-native applications, ideally AWS
- Understanding of SSL certificates and cryptographic key management
- Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools
- Ability to partner with developers and influence secure design decisions
- Familiarity with GitHub-based workflows and CI/CD pipelines
- Development experience with Ruby on Rails or similar dynamic languages (nice to have)
- Knowledge of AWS ECS/EKS, container security, secrets management, and infrastructure-as-code with CloudFormation or Terraform (nice to have)
- Experience building or maturing an AppSec program from early stages (nice to have)
- SOAR automation and scripting experience (nice to have)
- Experience in a PCI-compliant environment with annual reporting needs (nice to have)
Benefits:
- Considerable employer contributions for health, dental, and vision programs
- Generous PTO, paid holidays, and paid parental leave
- 401(k) matching program
- Merit advancement opportunities
- Career development & training
- Annual bonus eligibility
- Uplifting, collaborative work environment
- Community, connection, and belonging across the organization
Similar Jobs
Application Engineer
Application Engineer developing and supporting moderately complex systems for AAA’s membership, insurance, travel, and financial services. Creating specifications, prototypes, documentation, estimates, and project reports.
Technical Application Engineer – Industrial Communications, MDS, Lentronics
Technical Application Engineer supporting GE Vernova’s MDS and Lentronics industrial communications products. Developing technical sales strategies, customer solutions, presentations, and project scopes.
Senior Software Applications Engineer
Senior Software Applications Engineer developing subscription commerce systems for Calix’s cloud-first broadband platform. Building configurators, order processing, billing, entitlements, and customer subscription workflows.
Applications Engineer – LAM
Applications Engineer supporting BPA’s case-packing and tray-packing technologies for U.S.-based Latin American sales teams. Preparing technical proposals, optimizing product lines, and collaborating with customers, suppliers, and engineering.
Senior Application Security Engineer
Senior Application Security Engineer hunting vulnerabilities in Clover Health’s AI-enabled healthcare platform. Hardening systems, protecting PHI, and raising secure-coding standards across engineering teams.
HRSG Application Engineering Technical Leader
HRSG application engineering leader developing technically winning proposals for GE Vernova’s combined-cycle power plants. Optimizing HRSG designs, leading global engineering teams, and supporting customer projects.
Lead Application Engineer, Flexible Packaging
Lead application engineering for Henkel’s flexible packaging adhesives and coatings business. Supporting customers through demonstrations, trials, troubleshooting, training, and technical recommendations.
Application Engineer
Application Engineer supporting Cimatron’s integrated CAD/CAM software for mold and die design and manufacturing in Mexico. Delivering sales demos, training, implementations, and technical support.
Senior Application Security Engineer
Senior Application Security Engineer responsible for improving security posture of applications and cloud. Works on security tooling, developer workflow integration, and cloud security standards.
Senior eDiscovery Application Support Engineer
Senior Application Support Engineer supporting various eDiscovery applications at GeorgeJon. Ensuring application functionality and providing frontend and backend support to clients.
Senior Technical Application Engineer – Nuclear Control Upgrades
Senior Technical Application Engineer supporting the technical sales strategy for nuclear controls in GE Vernova. Leading technical evaluations and contributing to growth in the nuclear controls opportunity pipeline.
Application Product Security Engineer
Application Security Engineer protecting sensitive financial data at fintech startup Jump. Partnering with engineering teams to ensure security in product design and implementation.
Senior Software Engineer, Applications
Senior Software Engineer developing applications for CentralReach, a leader in autism and IDD care software. Focused on product shaping, technical leadership, and AI-assisted development.
Revenue Cycle Cloud Application Engineer
HIS Revenue Cycle Cloud Application Engineer at Solventum enhancing healthcare through effective system administration. Collaborating with diverse teams to ensure optimal performance and continuous improvement.
Applications Engineer
Applications Engineer for Trojan Technologies specializing in technical proposals and customer solutions. Leading project development and enhancing water treatment technology for municipal and industrial markets.
Senior Engineer – Customer Application Engineering
Senior Engineer in Customer Application Engineering providing technical solutions for Battery Energy Storage Systems at GE Vernova. Collaborating with customers and internal teams to optimize energy projects.
Senior Backend Engineer – Application Access
Product-oriented backend engineer designing APIs for access control at Teleport. Involved in the entire product development cycle with a focus on security and infrastructure management.
Controls Application Engineer – Level III
Controls Application Engineer at Daikin Applied focusing on sales and consultative selling techniques in HVAC solutions. Mentoring service and solutions sales force while driving brand presence at marketing events.
AI Engineer, Software Engineer – AI Applications
AI Engineer at Legion Intelligence developing customer-facing AI applications. Building intuitive AI solutions utilizing the company’s engineering capabilities and tools.
Applications Engineer – Level 3
Applications Engineer supporting Onto Innovation’s AOI and other products. Troubleshooting and training customers while maximizing business opportunities across regions.