Staff Application Security Engineer

As the founding senior engineer of the application security function, the full-time remote Staff Application Security Engineer will design and implement a secure development lifecycle, manage security tooling, and lead threat modeling and vulnerability management to enhance application security across the organization. Key responsibilities Design and build Fingerprint's secure development lifecycle, integrating security requirements and testing into existing workflows Lead threat modeling and security reviews for new products and features, while managing the vulnerability remediation process Serve as the technical lead for application-layer security incidents, defining logging and alerting requirements in collaboration with engineering teams Required qualifications 8+ years in software engineering and/or security engineering, with 5+ years focused on application security Strong software engineering foundation with proficiency in TypeScript/JavaScript, Go, Python, or similar languages Deep practical AppSec expertise, including knowledge of OWASP Top 10 and experience with threat modeling and security reviews Experience deploying and tuning security tooling (SAST, DAST, SCA) in CI/CD environments Proven track record of influencing security outcomes across engineering teams and clear communication of technical risks