Staff AppSec Engineer - Build Secure SDLC (Remote)

Fingerprint; United States; Remote; USD 177,000 - 240,000; Full time

Job summary

Fingerprint is building a dedicated AppSec function led by a Staff Engineer who will design, implement, and operate a secure SDLC and cutting-edge security tooling. The role combines hands-on engineering with threat modeling, vulnerability management, and collaboration with Compliance to strengthen security across products.

You will own the technical depth, drive risk-based remediation, and mentor engineers while shaping Fingerprint’s security posture in a remote, US-wide environment.

Qualifications

• 8+ years in software engineering or security engineering with 5+ years in AppSec
• Proficiency in production-grade code (TypeScript/JavaScript, Go, Python) and web/API architectures
• Hands-on AppSec experience; not just auditing or consulting

Responsibilities

• Design and operate Fingerprint’s secure SDLC with threat modeling at design time
• Own and operate the security tooling pipeline (SAST/DAST/SCA/secrets detection) in CI/CD
• Develop AI-first security tooling for triage and auto-remediation
• Build secure defaults and reusable security patterns (authn/authz, input validation, crypto)
• Perform hands-on security testing of the platform (authn/authz, API, injection, SSRF)
• Lead threat modeling and architecture security reviews for new products/features
• Manage vulnerability triage, risk rating, and remediation SLAs
• Provide engineering evidence for security controls in compliance activities

Skills

TypeScript/JavaScript

Go

Python

CI/CD pipelines

SAST/DAST/SCA

Secrets management

Tools

Snyk

CI/CD tooling

Job description

Fingerprint is building a dedicated AppSec function led by a Staff Engineer who will design, implement, and operate a secure SDLC and cutting-edge security tooling. The role combines hands-on engineering with threat modeling, vulnerability management, and collaboration with Compliance to strengthen security across products.

You will own the technical depth, drive risk-based remediation, and mentor engineers while shaping Fingerprint’s security posture in a remote, US-wide environment.