• Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite. • Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services. • Secure enterprise web applications, with a focus on mitigating OWASP Top 10 risks, CVSS scoring, CWE, WASC, and SANS Top 25 vulnerabilities. • Integrate security practices into development workflows using IDEs such as Eclipse, JDeveloper (including pipeline development), or Visual Studio. • Perform application security testing and automation using tools such as OWASP ZAP, Burp Proxy, Selenium, and Interactive Application Security Testing (IAST) capabilities. • Write and maintain bash scripts to support security automation, testing, and troubleshooting tasks. • Participate in vulnerability discovery, triage, and remediation processes, including crowdsourced security programs via platforms like HackerOne. • Work in Linux or UNIX environments, including navigating file systems and troubleshooting basic website connectivity and security issues. • Ensure applications and security practices align with federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.

• Lead, mentor, and build a world-class team of Enterprise Application Engineers. • Be responsible for hiring, onboarding, performance management, and the career development of your direct reports. • Act as the "player-coach" and most senior technical expert for your team, capable of unblocking your engineers, leading complex architecture reviews, and troubleshooting the most challenging issues. • Foster a culture of accountability, collaboration, and continuous improvement. • Develop and maintain the strategic roadmap for our enterprise application and integration architecture, ensuring it scales with the company's growth. • Act as the primary technical consultant and liaison for business leaders (e.g., Finance, HR, Marketing, Operations), understanding their needs and translating them into scalable, secure technology solutions. • Manage vendor relationships, software licenses, and budgets for your application stack, continuously evaluating new tools to maximize ROI and business value. • Manage the entire Google Workspace ecosystem (Gmail, Drive, Calendar, Groups), defining, configuring, and enforcing policies, rules, and OU structures. • Lead the architecture and administration of our Atlassian stack (Jira, Confluence) guiding your team in building complex workflows and customizing projects for other engineering and business teams. • Design, build, and manage a SaaS Management Platform (SMP) to bring all OppFi SaaS applications under centralized management. • Proactively analyze license utilization across our entire SaaS portfolio to identify opportunities for cost savings, license reclamation, and contract consolidation. • Partner with Information Security and Enterprise Risk Management to conduct technical reviews for all new SaaS applications. • Serve as the top-level architect for our Identity and Access Management (IAM) program. • Design, build, and manage our centralized Identity Provider (IdP) as the single source of truth for all user identities. • Develop, deploy, and enforce Role-Based Access Control (RBAC) policies to ensure the principle of least privilege. • Champion an "automation-first" mindset. • Build and manage automated Joiner, Mover, and Leaver (JML) workflows, ensuring employees are provisioned correctly on their start date and all access is instantly revoked upon termination. • Architect, build, and maintain robust integrations between our core business systems. • Be responsible for the reliability and integrity of data as it moves between integrated systems, including error handling and monitoring.

• Lead design, development, and maintenance of Proof mobile applications and SDK’s for Android and iOS • Proactively drive all phases of mobile app development, from ideation to release to tracking and analyzing the impact of shipped features • Collaborate cross-functionally with designers, developers, QA engineers, and product managers • Work with existing and new vendors providing components, SDK’s and API’s enabling Proof mobile apps • Provide leadership and critical input on advancing technical standards and best practices as appropriate • Contribute to continuous improvements of mobile app automation, unit tests, CI/CD • Triage bugs, track software defects, and ensure their timely resolution

• The Application Engineer – Wireline & Energy Services is a senior technical role supporting wireline and oilfield service applications across testing, data management, and cross-functional execution. • Responsible for overseeing all wireline applications testing, maintaining and improving technical data management practices, acting as the technical bridge between engineering, operations, R&D, and commercial teams, and implementing standards that ensure data integrity and service quality. • Provide technical client facing support for development/design/validation of tests. • Develop test programs and implement processes around testing to ensure safe and efficient performance of tests. • Design and capture all data requirements around testing, generate reports, and manage data integrity and systems. • Collaborate with all departments to share best practices and ensure alignment. • Support Sales and Marketing through validation/creation of case studies, job information forms, job programs, and technical papers.