[Hiring] Staff Application Security Engineer @Fingerprint

Role Description

Fingerprint's device intelligence platform processes billions of identification events for some of the world's most security-conscious companies — financial institutions, fraud prevention operators, and enterprises that rely on us to stop attackers. As we scale with large enterprise customers, we're investing in application security as a dedicated, first-class engineering discipline.

You will be the founding senior engineer of that function — the person who turns strategy into a working secure SDLC, finds and fixes what matters, and raises the security bar across engineering through technical depth, tooling, and influence. This is a hands-on Staff role. You will design, build, and operate — not just advise.

What You'll Do

• Secure SDLC & Security Engineering
  • Design and build Fingerprint's secure development lifecycle: security requirements, threat modeling at design time, secure code review, and pre-release security testing.
  • Own and operate the security tooling pipeline: SAST, DAST, SCA/dependency scanning, secrets detection, and container/IaC scanning.
  • Build the pipeline AI-first: AI-assisted triage and auto-remediation, security review agents, and AI-augmented testing.
  • Build paved-road security: secure defaults, hardened libraries and frameworks, reusable patterns.
  • Write code: contribute fixes, security libraries, CI integrations, and automation directly to engineering repositories.
• Threat Modeling, Security Reviews & Vulnerability Management
  • Lead threat modeling and architecture security reviews for new products, features, and significant changes.
  • Run and mature the vulnerability management program: triage, risk-rate, and drive remediation of findings.
  • Partner with the Compliance Lead on scoping, retesting, and turning findings into engineering work.
  • Perform hands-on security testing of Fingerprint's platform.
• Incident Response & Detection (application layer)
  • Serve as the technical lead for application-layer security incidents.
  • Define what application security logging and alerting should exist.
• Security Culture & Enablement
  • Act as the AppSec partner to engineering teams.
  • Develop and deliver practical secure coding training.
  • Mentor engineers in security thinking.
• Partnership & Customer Trust
  • Partner with the Senior Manager, Application Security on the AppSec roadmap.
  • Provide the engineering evidence behind security controls when compliance needs it.
  • Support enterprise customer security conversations.
  • Contribute to vendor security assessments.

Qualifications

• 8+ years in software engineering and/or security engineering, with 5+ years focused on application security.
• Strong software engineering foundation: production-quality code (TypeScript/JavaScript, Go, Python, or similar).
• Deep practical AppSec expertise: OWASP Top 10 and beyond.
• Threat modeling and security review experience.
• Security tooling program experience.
• AI-native security tooling experience.
• Vulnerability management ownership.
• Influence without authority.
• Clear communication skills.

Requirements

• Experience in fraud detection, bot mitigation, identity, or device intelligence.
• Cloud security depth on AWS and familiarity with CSPM tooling.
• Client-side and mobile SDK security experience.
• Multi-tenant SaaS experience with high-volume, latency-sensitive APIs.
• Bug bounty program operation experience.
• AI/ML security awareness.
• Experience with autonomous or AI-augmented penetration testing.
• Security certifications or published research.
• Experience supporting SOC 2 / ISO 27001 controls.

Benefits

• Salary range: $177k - $240k based on location and experience.
• Inclusive work environment that celebrates diverse backgrounds.
• Remote-first work culture.