Fingerprint

Staff Application Security Engineer

Undisclosed

Remote. The employer does not say where candidates may be based.

Location not stated

Employer listed it 11 days ago · Added 8 days ago

First listed 11 days ago and still open.

Salary

$177,000 to $240,000

Location

Location not stated

Timezone

Not stated

Contract

Full-time

Experience

Lead

What the advert says

Quoted word for word from the employer's advert. Where it says nothing, we say so.

Working hours: Not mentioned in the advert
Where you can work from: Fingerprint teammates need to be authorized to work from their home location.
Contract: Not mentioned in the advert
Experience asked for: Not mentioned in the advert
Pay: Compensation & Transparency

Remote flexibility

Undisclosed

The listing is advertised as remote but does not state which countries or regions candidates may work from.

Why this role is Undisclosed

We only label a role Work from anywhere, Region restricted or Work from home when the employer's own wording says so. We checked this advert under our current rules and found no country or region eligibility requirement in it. We don't guess, so it stays Undisclosed until the employer publishes enough location information. Here is exactly what the advert left out.

Countries you can work from: Not stated. The advert only gives "Remote", which names no country you must live in.
Whether the work is remote: Confirmed by the employer: "Fingerprint is a globally dispersed, 100% remote company."
Working hours: Not stated. No timezone overlap or set hours are mentioned, so assume nothing either way.

Worth a look all the same. Missing wording is usually a rushed job posting rather than a closed door, so ask where you can be based in your first message, before you write a tailored application.

What the employer says

Source listing states candidate location: "Remote"

What Nomaders makes of it

No residency or region requirement found in the job description
Check with the employer before assuming you can work from abroad

The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.

Before you apply

Questions worth asking: Nomaders interpretation

The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.

Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.

About the role

Fingerprint empowers enterprises to detect and stop online fraud with the world’s most accurate device intelligence. We lead our industry with bleeding-edge identification capabilities and work on turning new ideas and discoveries in the fraud detection space into reality. Our customers range from innovative startups to leading enterprise companies, including Plaid, Dropbox, and Booking.com.

Fingerprint is a globally dispersed, 100% remote company. We were named on on the 2026 Forbes Best Startup Employers list and ranked #803 on the 2026 Inc. 5000 list of America’s fastest-growing private companies.

We have raised $77M and are backed by Craft Ventures ( Tesla, Facebook, Airbnb ), Nexus Venture Partners ( Postman , Apollo.io, MinIO , Druva) and Uncorrelated Ventures ( Redis, Rollbar, Gradle ).

The Role in Context

Fingerprint's device intelligence platform processes billions of identification events for some of the world's most security-conscious companies — financial institutions, fraud prevention operators, and enterprises that rely on us to stop attackers. That makes our own application security a product feature, not a back-office function: our customers' adversaries are, by definition, motivated to probe what we build.

As we scale with large enterprise customers, we're investing in application security as a dedicated, first-class engineering discipline. Security is already part of how our teams build — scanning in the pipeline, a Cloud Platform team that treats security as a partner, and a mature compliance posture — and we're now standing up a focused AppSec function, led by a Senior Manager, Application Security who owns the program and strategy, to take it to the next level. You will be the founding senior engineer of that function — the person who turns strategy into a working secure SDLC, finds and fixes what matters, and raises the security bar across engineering through technical depth, tooling, and influence.

This is a hands-on Staff role. You will design, build, and operate — not just advise.

What You'll Do

Secure SDLC & Security Engineering

Design and build Fingerprint's secure development lifecycle: security requirements, threat modeling at design time, secure code review, and pre-release security testing — integrated into how engineers already work, not bolted on as a gate

Own and operate the security tooling pipeline: SAST, DAST, SCA/dependency scanning, secrets detection, and container/IaC scanning (Snyk and equivalents) — tuned for signal over noise, integrated into CI/CD, with clear ownership and SLAs for findings

Build the pipeline AI-first: AI-assisted triage and auto-remediation, security review agents that run inside the coding-agent loop and in CI, and AI-augmented testing — and decide, with evidence, what each is trusted to block, flag, or fix on its own

Build paved-road security: secure defaults, hardened libraries and frameworks, reusable patterns (authn/authz, input validation, secrets handling, crypto) that make the secure path the easy path

Write code. Contribute fixes, security libraries, CI integrations, and automation directly to engineering repositories

Threat Modeling, Security Reviews & Vulnerability Management

Lead threat modeling and architecture security reviews for new products, features, and significant changes across the API, SDKs (web and mobile), dashboard, and data pipeline

Run and mature the vulnerability management program: triage, risk-rate, and drive remediation of findings from scanners, pen tests, bug bounty, and customer reports — with clear severity standards and remediation SLAs

Partner with the Compliance Lead, who runs the penetration testing program today, on scoping, retesting, and turning findings into engineering work — you bring the technical depth and own remediation

Perform hands-on security testing of Fingerprint's platform — manual review and exploitation of authn/authz, API, injection, SSRF, business-logic, and abuse-path issues — with particular attention to the fraud and bot-detection threat surface where adversaries actively attempt to defeat the product

Incident Response & Detection (application layer)

Serve as the technical lead for application-layer security incidents: investigation, containment, root cause, and remediation — partnering with Cloud Platform on infrastructure incidents

Define what application security logging and alerting should exist, and partner with Cloud Platform and engineering teams to get it built

Security Culture & Enablement

Act as the AppSec partner to engineering teams: office hours, design consultations, secure coding guidance, and a Security Champions program that scales your impact beyond one person

Requirements

The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.

Benefits

No benefits package published with this listing. Ask about it at first interview.

How to apply

1Check the flexibility label above, undisclosed, matches where you plan to live and work.
2Tailor your CV to the role at Fingerprint, mentioning your remote working experience.
3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.

Found 9d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.

Listing sourced from Company boards.