[All remote jobs](https://jobicy.com/jobs.md)[![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg)](https://jobicy.com/company/beyond-finance.md)[Beyond Finance](https://jobicy.com/company/beyond-finance.md) # Staff Security Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/beyond-finance.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 160k–195k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished14 Oct 2026Apply before13 Nov 2026Listing views78Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Beyond Finance is hiring a senior hands-on security engineer to embed security practices across product development, cloud infrastructure, and automation. The role partners closely with Engineering, DevOps, and Product to influence secure architecture, conduct reviews, and remediate vulnerabilities. Core work spans AppSec tooling, AWS security posture, CI/CD controls, Python automation, SIEM detections, and vulnerability management. This is a high-ownership staff-level position requiring at least eight years of security engineering experience and the ability to independently deliver improvements across systems. Financial-services or PCI experience, Terraform, offensive security, mobile security, and AI/ML security exposure are valued additions. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis staff-level role requires deep expertise in at least one security specialty plus practical capability across application security, cloud security, and security automation. The engineer must independently influence architecture and ship security improvements across teams and systems they may not directly own. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$177,500US market range (per year)$165k–$210k0$231.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer explicitly lists a base annual salary range of $160,000–$195,000 USD, with a midpoint of $177,500 per year. A reasonable estimated US market range for a staff-level security engineer with broad AppSec, AWS cloud security, and automation responsibilities is $165,000–$210,000 annually; bonus eligibility may increase total compensation. ## Core skills Skills and capabilities most closely associated with this opportunity. [Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[AWS Security](https://jobicy.com/jobs?search_keywords=AWS%20Security.md)[Security Automation](https://jobicy.com/jobs?search_keywords=Security%20Automation.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Secure SDLC](https://jobicy.com/jobs?search_keywords=Secure%20SDLC.md)[Threat Modeling](https://jobicy.com/jobs?search_keywords=Threat%20Modeling.md)[SAST](https://jobicy.com/jobs?search_keywords=SAST.md)[DAST](https://jobicy.com/jobs?search_keywords=DAST.md)[Software Composition Analysis](https://jobicy.com/jobs?search_keywords=Software%20Composition%20Analysis.md)[CI/CD Security](https://jobicy.com/jobs?search_keywords=CICD%20Security.md)[Vulnerability Management](https://jobicy.com/jobs?search_keywords=Vulnerability%20Management.md)[SIEM Detection Engineering](https://jobicy.com/jobs?search_keywords=SIEM%20Detection%20Engineering.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[IAM](https://jobicy.com/jobs?search_keywords=IAM.md) Sample interview questionsHow would you embed security into a product team’s design and delivery process without creating unnecessary delivery friction?I would engage during design to identify material threats, document pragmatic security requirements, and prioritize controls that can be automated in developer workflows. I would use risk-based review gates and clear remediation guidance rather than relying on manual approvals for routine changes. Describe how you would improve application security coverage across a web and mobile environment. I would first inventory applications, data flows, ownership, and existing controls, then establish coverage for code scanning, dependency analysis, secrets detection, dynamic testing, and mobile-specific testing where appropriate. Findings would be tuned, prioritized by exploitability and business impact, and connected to clear engineering ownership and remediation SLAs. What approach would you take to improving AWS cloud security posture? I would assess identity permissions, network boundaries, secrets handling, logging, container controls, and data exposure through AWS-native services and CNAPP findings. I would prioritize high-impact identity and public-exposure risks, codify baseline controls in infrastructure-as-code, and continuously monitor for drift. Give an example of a security automation project you would prioritize in this role. I would build a Python-based workflow that enriches and deduplicates findings from scanners, cloud posture tools, and vulnerability sources, then routes prioritized issues to the accountable team. This reduces manual triage while making remediation decisions more consistent and measurable. How do you handle a significant security issue in a system owned by another engineering team? I would rapidly validate the issue, communicate the risk and recommended mitigation in practical terms, and partner with the owning team on a safe fix. Where appropriate, I would make or contribute the change myself, obtain review, deploy it, and follow up with preventive controls or lessons learned. Opportunity details ## About this role. At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we’ve helped over 1 million clients on their path to a brighter future. While we’re proud of what we’ve already accomplished, we’re searching for new collaborators to help us get to the next level! If you’re looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. ### Role Overview As a Staff Security Engineer, you’ll get involved early with Product and Software Engineering teams to embed security into our architecture and processes as they design, build, and ship. You’ll also be someone the Security team can pull into any project, at any phase and regardless of domain, to make sure it lands on the right security outcome. This is a hands-on role, and you don’t need to be an expert in all three areas: application security, cloud security, and security automation and tooling. You should have strong, demonstrated depth in one of the three, along with enough working knowledge of the other two to contribute without hand-holding and to be a trusted voice on technical decisions outside the systems you personally own. ### What You’ll Do * Partner with Engineering, DevOps, and Product across projects, providing security input at any phase of design or build, regardless of domain. * Guide secure design and code review for web and mobile applications, and help manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM, and mobile security tooling). * Help triage and remediate application-level vulnerabilities with engineering teams. * Contribute to cloud security posture across the AWS environment, including IAM, network segmentation, container security, secrets, and data exposure, using CNAPP and AWS-native tooling. * Support cloud and application vulnerability management, and help tune WAF rules as needed. * Build automation and internal tooling, primarily in Python, that reduces manual work for the security team. * Contribute to security log pipelines, SIEM detections, and endpoint security controls. * Help embed security checks, such as scanning and secrets detection, into CI/CD pipelines in partnership with DevOps. * Contribute to secure development and infrastructure standards, playbooks, and enablement materials used across engineering. ### What We’re Looking For Requirements * 8+ years of hands-on security engineering experience. * Strong, demonstrated depth in one of the following, with working knowledge of the other two: application security, cloud security, or security automation and tooling. * Working knowledge of threat modeling. * Operates independently and drives projects without day-to-day oversight. Nice to Have * Deeper expertise across more than one of the following: application security (SAST/DAST/ASM tooling, secure SDLC), cloud security (AWS IAM, networking, container orchestration, CNAPP-driven posture management), or security automation (Python tooling, log pipelines, SIEM detection engineering). * Hands-on Infrastructure as Code experience, ideally Terraform. * Red teaming or offensive security experience. * PCI-regulated or financial services environment experience. * Mobile application security experience. * AI/ML security exposure: prompt injection, data poisoning, model abuse, and the controls that mitigate them. * Identity security across human and non-human identities. * Development experience with Ruby on Rails, Python, Go, or similar languages. ### The Ideal Candidate The ideal candidate measures success by reduced risk, not tickets closed. They understand how an attacker would approach a system and use that understanding to favor secure design and simple guardrails over adding more scanners or approval gates. They treat application code, cloud infrastructure, identity, and the pipeline as one connected system rather than separate problems. This person is proactive. Given an ambiguous problem, they identify the highest-impact piece and start working on it rather than waiting for a fully scoped ticket, and they’d rather deliver a partial fix now and improve it over time than spend months on the perfect design. When a fix is needed in a system they don’t own, they make the change themselves, get it reviewed, and ship it rather than filing a ticket and waiting on someone else. Engineers trust this person’s judgment. They catch a bad design, a fragile system, or an overlooked risk before it ships, and they flag potential blockers early enough to design around them instead of working around them later. ### Why Join Us * High-ownership role with room to influence architecture, tooling, and process beyond your own domain. * Work spans application security, cloud security, and security automation rather than being boxed into one lane. * Modern engineering environment with strong leadership support for security. * Competitive compensation, benefits, and growth opportunities. The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus. Base Salary Range $160,000—$195,000 USD Why Join Us? While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer: * Considerable employer contributions for health, dental, and vision programs * Generous PTO, paid holidays, and paid parental leave * 401(k) matching program * Merit advancement opportunities * Career development & training And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization. Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team. Show more [Apply now >](https://jobicy.com/jobs/155261-staff-security-engineer.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg) Beyond Finance Oct 14 New ### [Senior Cloud Security Engineer](https://jobicy.com/jobs/155257-senior-cloud-security-engineer.md) At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,… * ![BetterHelp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/0b48fde8-221.jpeg) BetterHelp Oct 14 New ### [Head of Security Engineering](https://jobicy.com/jobs/153174-head-of-security-engineering.md) Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone…. * ![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png) Zscaler Oct 13 New ### [Senior Detection Analyst](https://jobicy.com/jobs/155194-senior-detection-analyst.md) Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 13 New ### [Detection & Response Engineer](https://jobicy.com/jobs/155169-detection-response-engineer.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 13 New ### [Detection & Response Lead](https://jobicy.com/jobs/155171-detection-response-lead.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Oct 13 New ### [Manager, Security Incident Response](https://jobicy.com/jobs/153123-manager-security-incident-response.md) 1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![Rithum logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/fe3986d8-221-1.jpeg) Rithum Oct 13 New ### [Staff Information Security Engineer – AI First](https://jobicy.com/jobs/153112-staff-information-security-engineer-ai-first.md) Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers,… * ![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png) Sporty Group Oct 13 New ### [Offensive Security Engineer](https://jobicy.com/jobs/149060-offensive-security-engineer.md) About the roleMission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The… * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Oct 13 New ### [Security Engineer, Detection & Response](https://jobicy.com/jobs/153102-security-engineer-detection-response.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… [Browse all jobs](https://jobicy.com/jobs.md)