Staff/Lead Application Security Engineer
Beacon SoftwareResponsibilities
- Set the strategy and technical roadmap for product security across Beacon and its portfolio companies.
- Lead threat modeling and security architecture reviews and define standards for authentication, authorization, encryption, and tenant isolation.
- Own product security reviews of acquired codebases and cloud environments, including baseline posture, material risk, and remediation paths.
- Perform secure code reviews focused on authorization and business logic flaws and manage external penetration testing partners.
- Assess AI features, including agent architectures, model and tool access, delegated credentials, and reachable data.
- Own vulnerability management from intake and prioritization through remediation SLAs and reporting.
- Define and integrate SAST, DAST, SCA, and secrets scanning into CI/CD across the portfolio and build automation for fix pull requests, dependency remediation, and findings routing.
- Write secure coding standards and training, support product security incident response, and partner with GRC on audit and customer security review evidence.
Requirements
- Expert knowledge of web and API security, identity and access design including authentication, authorization, RBAC, and ABAC, and applied cryptography.
- Experience securing applications in cloud environments and containerized workloads.
- Ability to ship production code and author security fixes, not only specify them.
- Ability to set architecture and standards across many codebases.
- Track record of driving security work to completion in engineering organizations outside the reporting line.
- Experience using AI in work and judgment about when to build security tooling versus buy it.
Categories
About Beacon Software
Beacon is the permanent home for Main Street software and services supporting the real economy. We buy, build, and grow exceptional mission-critical software businesses, preserving their legacy while expanding the scale of their founders’ ambitions. Our model is different. Unlike private equity, we don’t buy to flip. We hold forever, investing in product, customers, and teams for the long term. Founders who join Beacon gain more than capital: they access in-house engineering, AI, design, and fintech expertise, as well as a network spanning Silicon Valley, Wall Street, and Main Street. We simplify the back office, accelerate growth with proven playbooks, and give founders the freedom to focus on what they do best: building great software for their markets. Every company under the Beacon umbrella remains independent, with its own brand and customers, but benefits from shared resources and immediate value creation. Our approach has already helped portfolio companies win major RFPs, modernize technology stacks, and expand market share. Beacon was founded by experienced operators and investors from companies like D1 Capital, Instacart, Sequoia Capital, and Databricks who believe ambitious software deserves a forever home. Our success is measured founder by founder, company by company, and we’re just getting started.