{"id":62254,"url":"https://alion.io/job/beyond-finance-staff-security-engineer","title":"Staff Security Engineer","company":{"id":6658,"name":"Beyond Finance","domain":"beyondfinance.com","url":"https://alion.io/company/beyond-finance","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":72,"open_postings":26,"ghost_share":0.385,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":115,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":148000,"max_usd":263000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":96},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Assembly","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"LLM Guardrails","optional":true},{"name":"Red Teaming","optional":true},{"name":"Ruby","optional":true},{"name":"Ruby on Rails","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-08-06T14:26:01Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-19T07:15:21Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":73},"description":"At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.\nWhile we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.\nRole Overview\nAs a Staff Security Engineer, you'll get involved early with Product and Software Engineering teams to embed security into our architecture and processes as they design, build, and ship. You'll also be someone the Security team can pull into any project, at any phase and regardless of domain, to make sure it lands on the right security outcome.\nThis is a hands-on role, and you don't need to be an expert in all three areas: application security, cloud security, and security automation and tooling. You should have strong, demonstrated depth in one of the three, along with enough working knowledge of the other two to contribute without hand-holding and to be a trusted voice on technical decisions outside the systems you personally own.\nWhat You'll Do\nPartner with Engineering, DevOps, and Product across projects, providing security input at any phase of design or build, regardless of domain.\nGuide secure design and code review for web and mobile applications, and help manage core AppSec tooling (SAST, SCA, secret scanning, DAST, ASM, and mobile security tooling).\nHelp triage and remediate application-level vulnerabilities with engineering teams.\nContribute to cloud security posture across the AWS environment, including IAM, network segmentation, container security, secrets, and data exposure, using CNAPP and AWS-native tooling.\nSupport cloud and application vulnerability management, and help tune WAF rules as needed.\nBuild automation and internal tooling, primarily in Python, that reduces manual work for the security team.\nContribute to security log pipelines, SIEM detections, and endpoint security controls.\nHelp embed security checks, such as scanning and secrets detection, into CI/CD pipelines in partnership with DevOps.\nContribute to secure development and infrastructure standards, playbooks, and enablement materials used across engineering.\nWhat We're Looking For\nRequirements\n8+ years of hands-on security engineering experience.\nStrong, demonstrated depth in one of the following, with working knowledge of the other two: application security, cloud security, or security automation and tooling.\nWorking knowledge of threat modeling.\nOperates independently and drives projects without day-to-day oversight.\nNice to Have\nDeeper expertise across more than one of the following: application security (SAST/DAST/ASM tooling, secure SDLC), cloud security (AWS IAM, networking, container orchestration, CNAPP-driven posture management), or security automation (Python tooling, log pipelines, SIEM detection engineering).\nHands-on Infrastructure as Code experience, ideally Terraform.\nRed teaming or offensive security experience.\nPCI-regulated or financial services environment experience.\nMobile application security experience.\nAI/ML security exposure: prompt injection, data poisoning, model abuse, and the controls that mitigate them.\nIdentity security across human and non-human identities.\nDevelopment experience with Ruby on Rails, Python, Go, or similar languages.\nThe Ideal Candidate\nThe ideal candidate measures success by reduced risk, not tickets closed. They understand how an attacker would approach a system and use that understanding to favor secure design and simple guardrails over adding more scanners or approval gates. They treat application code, cloud infrastructure, identity, and the pipeline as one connected system rather than separate problems.\nThis person is proactive. Given an ambiguous problem, they identify the highest-impact piece and start working on it rather than waiting for a fully scoped ticket, and they'd rather deliver a partial fix now and improve it over time than spend months on the perfect design. When a fix is needed in a system they don't own, they make the change themselves, get it reviewed, and ship it rather than filing a ticket and waiting on someone else.\nEngineers trust this person's judgment. They catch a bad design, a fragile system, or an overlooked risk before it ships, and they flag potential blockers early enough to design around them instead of working around them later.\nWhy Join Us\nHigh-ownership role with room to influence architecture, tooling, and process beyond your own domain.\nWork spans application security, cloud security, and security automation rather than being boxed into one lane.\nModern engineering environment with strong leadership support for security.\nCompetitive compensation, benefits, and growth opportunities.\nThe base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.\nBase Salary Range\n$160,000—$195,000 USD\nWhy Join Us?\nWhile you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:\nConsiderable employer contributions for health, dental, and vision programs\nGenerous PTO, paid holidays, and paid parental leave\n401(k) matching program\nMerit advancement opportunities\nCareer development & training\nAnd finally, our team spirit and culture! Wecultivate an environment of community, connection, and belonging across our entire organization.\nBeyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.","description_format":"text","description_chars":6254,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Personal Finance Apps & Education"],"lifecycle":[{"event":"open","at":"2026-08-06T14:26:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 18 · green card filings: 3","filings_12m":18,"filings_prev_12m":34,"green_card_filings_12m":3,"median_offered_wage_usd":128214,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":0.72,"age_days":73,"expected_fill_days":115,"reasons":["conf:2","win:mid","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/beyond-finance-staff-security-engineer","json_url":"https://alion.io/job/beyond-finance-staff-security-engineer.json","meta":{"generated_at":"2026-10-19T07:17:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4675,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6658},"rest":"https://alion.io/mcp/rest/get_company?id=6658"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbeyond-finance-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbeyond-finance-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbeyond-finance-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/beyond-finance-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbeyond-finance-staff-security-engineer"}]}