Staff Application Security Engineer

📋 Description

• Design and build Fingerprint's secure development lifecycle: security requirements, threat modeling
• Own and operate the security tooling pipeline: SAST, DAST, SCA/dependency scanning, secrets
• Build the pipeline AI-first: AI-assisted triage and auto-remediation, security review agents that
• Build paved-road security: secure defaults, hardened libraries and frameworks, reusable patterns
• Write code. Contribute fixes, security libraries, CI integrations, and automation directly to
• Lead threat modeling and architecture security reviews for new products, features, and significant

🎯 Requirements

• 8+ years in software engineering and/or security engineering, with 5+ years focused on application
• Strong software engineering foundation: Write production-quality code (TypeScript/JavaScript, Go
• Deep practical AppSec expertise: OWASP Top 10 and beyond — authentication and authorization design
• Threat modeling and security review experience: Led design-time security reviews for complex
• Security tooling program experience: Deployed and tuned SAST/DAST/SCA/secrets-detection tooling in
• AI-native security tooling: Run AI-assisted code analysis, triage, or auto-remediation in a real

🎁 Benefits

• Shape a dedicated AppSec function from its first days, with a manager and a mandate behind you
• A security problem that actually matters: Fingerprint's customers use us to stop fraud and abuse.
• Modern stack and tooling already in place: Snyk, Wiz, Cloudflare, Okta, and a Cloud Platform team
• Your time goes to engineering: Compliance, IT, and infrastructure are each owned by capable teams
• Staff-level scope and autonomy: Set the technical direction for application security at a company