Remote opportunity at
FingerprintStaff Application Security Engineer
Fingerprint, an organization specializing in device intelligence to assist enterprises with fraud detection, is hiring a Staff Application Security Engineer. Recognized on the Inc. 5000 and…
Career Tools
About This Role
Fingerprint, an organization specializing in device intelligence to assist enterprises with fraud detection, is hiring a Staff Application Security Engineer. Recognized on the Inc. 5000 and Forbes lists, the company offers a platform handling billions of identification events for global enterprise clients. In this role, the engineer will act as the founding senior technical team member within a newly established Application Security function, working alongside a Senior Manager. The position…
Job Description
Fingerprint, an organization specializing in device intelligence to assist enterprises with fraud detection, is hiring a Staff Application Security Engineer. Recognized on the Inc. 5000 and Forbes lists, the company offers a platform handling billions of identification events for global enterprise clients. In this role, the engineer will act as the founding senior technical team member within a newly established Application Security function, working alongside a Senior Manager. The position requires a hands-on professional who can design, construct, and operate security initiatives rather than merely advise on them.
The successful candidate will take charge of the secure development lifecycle, threat modeling, security code reviews, and tooling pipelines including SAST and DAST. Daily responsibilities involve integrating AI-assisted security tooling, building hardened coding frameworks, managing vulnerability remediation, and serving as the technical lead for application-level incidents. This is a full-time position offering a salary range of USD 177,000 to 240,000 per year, determined by geographical location and expertise. Applicants must be authorized to work from their home location, as visa sponsorship is not available.
Responsibilities
- Design and implement the secure development lifecycle including threat modeling and code reviews
- Operate and tune the security tooling pipeline such as SAST, DAST, SCA, and container scanning
- Deploy AI-assisted triage, auto-remediation, and coding-agent security review loops
- Construct paved-road security defaults, hardened libraries, and reusable patterns for authentication and input validation
- Write code directly into engineering repositories, contributing fixes, security libraries, and CI integrations
- Lead architecture security reviews for new products, APIs, SDKs, and data pipelines
- Run the vulnerability management program by triaging findings from scanners, pen tests, and bug bounties
- Perform manual security testing targeting injection, authentication flaws, and abuse paths
- Serve as the technical lead for application-layer security incidents and investigations
- Mentor engineers in security practices and deliver practical secure coding training
Requirements
- At least 8 years of total experience in software engineering or security engineering
- Minimum of 5 years focused specifically on application security within a product company
- Software engineering proficiency in languages such as TypeScript, JavaScript, Go, or Python
- Practical expertise in OWASP Top 10 vulnerabilities, API security, and cryptography
- Demonstrated experience designing threat models and conducting system security reviews
- Background in deploying and tuning security tooling like SAST, DAST, and SCA within CI/CD pipelines
- Experience running AI-assisted code analysis or auto-remediation in a production environment
- Track record of managing vulnerability triage, severity rating, and remediation tracking
Qualifications
- Experience in fraud detection, bot mitigation, identity, or device intelligence domains
- Cloud security depth on AWS services such as IAM, secrets management, and workload identity
- Familiarity with CSPM tooling like Wiz
- Knowledge of client-side and mobile SDK security, anti-tampering, and obfuscation trade-offs
- Experience working with multi-tenant SaaS platforms featuring high-volume, latency-sensitive APIs
- Background in operating bug bounty programs on platforms like HackerOne or Bugcrowd
- Awareness of AI and LLM security risks, prompt injection, and agent tool permissions
- Familiarity with autonomous or AI-augmented penetration testing and attack simulation
- Security certifications such as OSCP, OSWE, GWAPT, or CSSLP, or published security research
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Staff Application Security Engineer role?
The salary ranges from USD 177,000 to 240,000 per year. Final offers depend on factors including the candidate's exact location, experience, and expertise.
Is visa sponsorship available for this position?
No, visa sponsorship is not provided. Candidates must already be authorized to work from their home location.
What qualifications are required for applicants?
Applicants must have at least 8 years in software or security engineering, with 5 or more years focused on application security. Strong coding skills in languages like Go, Python, TypeScript, or JavaScript are necessary, alongside deep practical AppSec expertise.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.