Staff Application Security Engineer
fingerprint
Lead177 000-240 000 USD
About the position
Join a dedicated AppSec function as the founding senior engineer, focusing on secure development lifecycle and application security.
Tech stack
- typescript
- javascript
- go
- python
- appsec
- sast
- dast
- ai
Requirements
Required:
- 8+ years in software engineering and/or security engineering, with 5+ years focused on application security
- Strong software engineering foundation: You write production-quality code (TypeScript/JavaScript, Go, Python, or similar)
- Deep practical AppSec expertise: OWASP Top 10 and beyond — authentication and authorization design, API security, injection classes
- Threat modeling and security review experience: You've led design-time security reviews for complex systems
Nice to have:
- Experience in fraud detection, bot mitigation, identity, or device intelligence
- Cloud security depth on AWS and familiarity with Wiz or equivalent CSPM tooling
- Client-side and mobile SDK security: browser security model, anti-tampering, obfuscation trade-offs
- Experience with autonomous or AI-augmented penetration testing and attack simulation
Responsibilities
- Design and build Fingerprint's secure development lifecycle: security requirements, threat modeling at design time
- Own and operate the security tooling pipeline: SAST, DAST, SCA/dependency scanning, secrets detection
- Lead threat modeling and architecture security reviews for new products, features, and significant changes
- Serve as the technical lead for application-layer security incidents: investigation, containment, root cause, and remediation