Staff Application Security Engineer
Core
Secure NestJS applications and identity integrations (IdP/RP) for a fintech platform serving millions of savers and businesses.
Role type
Staff Application Security Engineer
Builds
Secure-by-default development patterns, reusable security libraries, and identity platform capabilities for NestJS/TypeScript apps.
Domain
Fintech, Application Security, Identity & Access Management (OAuth/OIDC)
Required skills
NestJS, TypeScript, OAuth 2.0, OpenID Connect, RBAC, OWASP Top 10, API Security, JWT, CI/CD Security, Threat Modeling, Secure Code Review
Preferred skills
OAuth 2.1, FAPI, Auth0/Okta/Keycloak, SAML, API Gateways, Penetration Testing, Security Certifications
Technologies
NestJS, TypeScript, OAuth 2.0, OpenID Connect, JWT, Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP
Responsibilities
Analyze NestJS apps for auth/authorization/vulnerabilities; Design secure OIDC/OAuth flows; Lead threat modeling and security architecture reviews; Build security libraries and developer guidance; Integrate security into CI/CD; Monitor security signals and support incident response.
Seniority
Staff, hands-on IC with strategic influence