Staff Application Security Engineer
Core
Securing NestJS and TypeScript applications, identity integrations (OAuth/OIDC), and cloud-native microservices for a financial technology platform.
Role type
Staff Application Security Engineer (IC)
Builds
Secure authentication/authorization flows, security architecture, and developer guidance for identity and API systems.
Domain
Financial Technology / Application Security / Identity & Access Management
Required skills
NestJS, TypeScript, Node.js, OAuth 2.0, OpenID Connect, JWT, RBAC, SAST/DAST, threat modeling, secure code review, API security, CI/CD security integration, identity platform integration (Auth0, Okta, Keycloak, Azure AD), penetration testing.
Preferred skills
OAuth 2.1, FAPI, PAR, JAR, DPoP, SAML, service meshes, infrastructure as code, secrets management, OWASP ASVS/SAMM.
Technologies
NestJS, TypeScript, Node.js, Azure, CI/CD, JWT, OAuth, OpenID, RBAC, SAML, microservices
Responsibilities
Analyze applications for auth/authorization weaknesses; establish secure development patterns for NestJS; design and review OAuth/OIDC flows; lead threat modeling and security architecture reviews; develop reusable security libraries and guidance; improve security testing (SAST, DAST, SCA); remediate vulnerabilities and confirm fixes; monitor security signals and support incident investigations.
Seniority
Staff, hands-on IC with strategic influence