Staff Application Security Engineer

Job Summary

As the founding senior engineer of the application security function, the full-time remote Staff Application Security Engineer will design and implement a secure development lifecycle, manage security tooling, and lead threat modeling and vulnerability management to enhance application security across the organization.

Key responsibilities

• Design and build Fingerprint's secure development lifecycle, integrating security requirements and testing into existing workflows
• Lead threat modeling and security reviews for new products and features, while managing the vulnerability remediation process
• Serve as the technical lead for application-layer security incidents, defining logging and alerting requirements in collaboration with engineering teams

Required qualifications

• 8+ years in software engineering and/or security engineering, with 5+ years focused on application security
• Strong software engineering foundation with proficiency in TypeScript/JavaScript, Go, Python, or similar languages
• Deep practical AppSec expertise, including knowledge of OWASP Top 10 and experience with threat modeling and security reviews
• Experience deploying and tuning security tooling (SAST, DAST, SCA) in CI/CD environments
• Proven track record of influencing security outcomes across engineering teams and clear communication of technical risks