Senior Application Security Engineer
Beyond Finance · Chicago, IL
About the role
The main owner of Beyond Finance's application security program, working directly with engineering teams that build Ruby on Rails web apps, React Native mobile apps and services in Python and Go.
The engineer sets the AppSec strategy and roadmap, gives security input during design and code review, spreads threat modelling and secure coding, and runs the tooling, including GitHub Advanced Security, Invicti, Hadrian, AppDome and Cloudflare WAF, wired into CI/CD. The role also helps DevOps harden AWS and leads triage and remediation of application vulnerabilities. Beyond Finance wants three to seven or more years in application or product security, strong OWASP knowledge, AWS experience, hands-on SAST, DAST or WAF work, and the ability to influence developers.