Application Security Engineer

intercom; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Fin, now part of Salesforce, is transforming customer service with AI-powered security. The Security Engineering team builds tier-zero protections, authentication, SAML/SSO, and enterprise controls to keep customers safe.

As a security engineer, you will partner with engineering across the SDLC, perform threat modeling and architecture reviews, and lead incident response in a fast-growing SaaS environment.

Qualifications

• Proven experience in SaaS security, focusing on application security and secure development practices.
• Experience designing or securing authentication, identity, or enterprise security capabilities.
• Strong understanding of security threats, threat modeling, and secure SDLC.

Responsibilities

• Own and engineer tier-zero security capabilities that help customers securely deploy Fin.
• Design, build, and evolve authentication, SAML/SSO, permissions, audit logging, and enterprise security controls.
• Partner with engineering teams across the SDLC to build secure products and services.
• Perform architecture reviews and security assessments for new features and systems.
• Lead security incident response, investigations, and remediation efforts.

Skills

Application security

Production systems

Threat modeling

Authn/Authz

Security assessments

Incident response

Automation

AI-assisted tools

Communication

Security trade-offs

Job description

Fin, now part of Salesforce, is on a mission to help businesses provide perfect customer experiences.

Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system.

Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI.

Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce.

What's the opportunity?

Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.

Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities.

The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the most ambitious AI-powered products in customer service. We're taking an AI-first approach to security, exploring areas such as AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.

What will I be doing?

• Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin.
• Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and other enterprise security controls.
• Partner with engineering teams throughout the software development lifecycle to build secure products and services.
• Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems.
• Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable.
• Contribute to secure development standards, guidance, and best practices across Fin.
• Lead application security initiatives across the software development lifecycle, helping teams identify and address security risks early.
• Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts.
• Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
• Partner with teams building AI-powered products to assess and mitigate emerging security risks.
• Help shape Fin’s AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities.
• Support the secure adoption of AI-assisted software development tools and engineering workflows.

What skills do I need?

• Proven application security, product security, or security engineering experience within a SaaS environment.
• Strong software engineering skills with experience designing, building, and operating production systems.
• Deep understanding of modern application security threats, secure software development practices, and threat modelling.
• Experience designing, building, or securing authentication, authorization, identity, or enterprise security capabilities.
• Experience conducting architecture reviews and security assessments for complex systems.
• Hands‑on security incident response experience, including leading investigations and remediation efforts.
• Strong programming skills and experience building tools, automation, or developer‑focused solutions.
• Comfortable using modern AI‑assisted development tools to improve productivity and engineering effectiveness.
• Ability to communicate security concepts clearly and collaborate effectively with engineering teams.
• A pragmatic approach to balancing security, customer impact, and engineering velocity.

Bonus skills & attributes

• Experience building or owning authentication, SAML/SSO, identity, or access management capabilities.
• Experience securing AI‑powered products or familiarity with security considerations for large language models, agentic systems, retrieval‑based architectures, or AI tool integrations.
• Experience building security automation or security‑focused platform capabilities at scale.
• Familiarity with cloud security, infrastructure security, or distributed systems.
• Experience working across both large‑scale SaaS environments and high‑growth companies.

#LI-Hybrid

Unleash Your Potential

In the United States, compensation offered will be determined by factors such as location, job level, job‑related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at fin.ai/careers.

Policies

Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.

We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non‑work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values.

Salesforce is an equal opportunity employer and maintains a policy of non‑discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training and education.