Senior Cybersecurity Engineer, Beyond Finance

• 5+ years in cybersecurity, with at least 3+ years of AWS security engineering experience
• Robust knowledge of application security (AppSec) practices and Zero Trust frameworks
• Deep expertise in AWS security, Wiz, Datadog SIEM, or comparable cloud-native security tools
• Strong understanding of IAM, VPC security, KMS, and other core AWS security services
• Proven experience with application security, including SAST, DAST, threat modeling, and SDLC integration
• Familiarity with Infrastructure as Code (Terraform, CloudFormation) and automation (Python, Bash)
• Experience working in highly regulated or compliance-heavy environments (PCI-DSS, SOC 2, ISO 27001, etc.)
• Excellent communication skills with the ability to clearly convey complex technical concepts

Desirable

• Beyond Finance is expanding it's security team and maturing it's security posture for our application security program
• As a Senior Cybersecurity Engineer, you take ownership of safeguarding our infrastructure, partner with the development team and other stakeholders to fine tune our processes
• You’ll be instrumental in maturing our security posture, driving automation, and influencing best practices across the organization
• While AppSec is the main hat that this person will wear, we foster a team mindset at Beyond Finance
• You may also spend time helping the rest of the team with vulnerability management, GRC, alerting and monitoring, and any other tasks that are mission critical
• Architect and implement cloud-native security solutions that address organizational needs and mitigate risks across applications, networks and systems
• Integrate and manage tools like Wiz, Datadog SIEM, and other modern security platforms
• Drive security best practices across the CI/CD pipeline and DevSecOps initiatives
• Develop threat models and security standards, recommend security controls and integrate security measures into system, infrastructure and application designs
• Lead Zero Trust architecture initiatives, ensuring secure access and identity-first controls across systems by implementing access management controls such as RBAC, SSO, IAM, CASB, CISM
• Collaborate with DevOps, Infrastructure, and Engineering teams to build secure-by-design systems
• Conduct risk assessments, vulnerability management, penetration testing and security incident investigations
• Automate security tasks and integrate tooling into existing cloud and application environments
• Provide mentorship to junior team members and serve as a subject matter expert on cloud security