Job description

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. The Role As the Security Engineering Manager, you will lead our Security Engineering team in a hands-on technical leadership role focused on securing the company’s cloud-native environment and development pipeline. You will manage a team of security engineers responsible for cloud infrastructure security, application security, CI/CD pipeline hardening, DSPM, and SaaS security posture management. Your primary objective is to harden our security posture, build and maintain preventative controls, and translate security strategy into a technically sound engineering roadmap. Key Responsibilities Technical Execution & Architecture: Remain hands-on in configuring cloud security tooling, reviewing architecture, and validating engineering decisions. Serve as the technical escalation point for complex challenges across the team’s domain. Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company’s development lifecycle and cloud environment. Team Leadership: Lead and develop a team of security engineers, managing their performance and growth while fostering a culture of technical excellence and ownership. Project Management & Execution: Define, manage, and execute security engineering projects from conception to completion, ensuring alignment with strategic goals and on-time delivery. Cross-Functional Partnership & Security Standards: Partner with DevOps, Engineering, and Product leadership to ensure security requirements are integrated into engineering roadmaps. Define the target security state for engineering teams and validate effective implementation. Driving Results: Proactively drive security initiatives and remediation to completion by removing roadblocks and instilling a sense of urgency. Skill Requirements 7+ years of hands-on InfoSec experience in Cloud Security, Application Security, or DevSecOps. Direct people management experience in a security or engineering context, with a proven ability to drive technical projects to completion through a team. Strong understanding of application security, CI/CD pipeline security, secrets management, and secure development practices. Proven ability to translate security strategy into actionable engineering requirements — both for a dedicated security team and in partnership with development organizations. Desirable Skills Hands-on experience with AWS security services and cloud-native security tooling (CSPM, CWPP, DSPM). Experience with application security testing (SAST, DAST, SCA) and securing CI/CD pipelines and Infrastructure as Code (Terraform, Spacelift). Familiarity with securing custom CRM or business-critical application environments. Knowledge of identity security across both human and non-human identities, including service accounts and API keys. The Ideal Candidate The ideal candidate is a technically deep security leader who has not lost their edge. You still get your hands dirty in cloud consoles and architecture reviews, but you measure your success by your team’s ability to systematically reduce risk across the company’s cloud infrastructure and applications. You possess the technical credibility to earn the respect of engineers and the interpersonal instincts to navigate the critical partnership between security, DevOps, and development. You are the technical backbone of the security engineering function, keeping your team focused on the work that has the greatest impact on the company’s security posture. #LI-LB2 The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus. Base Salary Range $170,000 — $200,000 USD Why Join Us? While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer: Considerable employer contributions for health, dental, and vision programs Generous PTO, paid holidays, and paid parental leave 401(k) matching program Merit advancement opportunities Career development & training And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization. Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.

Requirements

Must-haves

Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company’s development lifecycle and cloud environment.
Team Leadership: Lead and develop a team of security engineers, managing their performance and growth while fostering a culture of technical excellence and ownership.
Project Management & Execution: Define, manage, and execute security engineering projects from conception to completion, ensuring alignment with strategic goals and on-time delivery.
Driving Results: Proactively drive security initiatives and remediation to completion by removing roadblocks and instilling a sense of urgency.
Skill Requirements
7+ years of hands-on InfoSec experience in Cloud Security, Application Security, or DevSecOps.
Direct people management experience in a security or engineering context, with a proven ability to drive technical projects to completion through a team.
Strong understanding of application security, CI/CD pipeline security, secrets management, and secure development practices.
Proven ability to translate security strategy into actionable engineering requirements — both for a dedicated security team and in partnership with development organizations.
Desirable Skills
Hands-on experience with AWS security services and cloud-native security tooling (CSPM, CWPP, DSPM).
Experience with application security testing (SAST, DAST, SCA) and securing CI/CD pipelines and Infrastructure as Code (Terraform, Spacelift).
Familiarity with securing custom CRM or business-critical application environments.
Knowledge of identity security across both human and non-human identities, including service accounts and API keys.
The Ideal Candidate
Considerable employer contributions for health, dental, and vision programs
Merit advancement opportunities
Career development & training
And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdawsapi

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave