Senior Manager, Application Security

About this role

Fingerprint empowers enterprises to detect and stop online fraud with the world’s most accurate device intelligence. We lead our industry with bleeding-edge identification capabilities and work on turning new ideas and discoveries in the fraud detection space into reality. Our customers range from innovative startups to leading enterprise companies, including Plaid, Dropbox, and Booking.com.

Fingerprint is a globally dispersed, 100% remote company. We were named on on the 2026 Forbes Best Startup Employers list and ranked #803 on the 2026 Inc. 5000 list of America’s fastest-growing private companies.

We have raised $77M and are backed by Craft Ventures (Tesla, Facebook, Airbnb ), Nexus Venture Partners ( Postman, Apollo.io,MinIO, Druva) and Uncorrelated Ventures ( Redis, Rollbar, Gradle).

As Fingerprint scales with large enterprise customers in financial services and fraud prevention, we're investing in application security as a dedicated, first-class discipline. We're looking for a Senior Manager, Application Security to lead that investment, reporting directly to the VP of Engineering. You will personally own and build the AppSec program, and you will also manage a small team of experienced practitioners who run IT operations and compliance.

This is a VP-direct role with high autonomy and high visibility. Enterprise customers regularly ask about Fingerprint's security posture. You'll be the person who owns that answer.

Your Mission

•
Own and build application security — This is the center of gravity of the role. Define the AppSec roadmap, stand up the review and vulnerability management processes, and embed security-by-default practices across the engineering org. You set the standard, you hold it, and you work across teams to make it real

•
Lead a small team of experienced practitioners in IT and compliance — The Lead IT Engineer and Compliance Lead have deep domain expertise and drive their own work. You give them direction, context, prioritization, and air cover, and you ramp on their domains quickly enough to represent them credibly — you don't need to arrive as an IT or GRC expert

•
Be the security voice to customers and leadership — Enterprise customers, prospects, and partners evaluate Fingerprint's security posture. You represent it credibly, own the security questionnaire process, and communicate risk and posture to the VP and leadership team

•
Unify the function over time — Security, IT, and compliance have operated as separate workstreams. As you ramp, bring them under a coherent strategy with shared standards, shared risk language, and a roadmap that scales with the business

What You'll Do

Application Security (primary focus)

• Define and own Fingerprint's application security roadmap: vulnerability management, threat modeling, and the security review process for new features and architectural changes — and partner with the Compliance Lead, who runs the penetration testing program today, to connect its findings to engineering remediation

• Personally drive AppSec work in the early phase — triage findings, run security reviews, partner with engineers on remediation — while building the program so it scales beyond you

• Build security-by-default practices into engineering workflows — secure SDLC, dependency and secrets hygiene, CI-integrated scanning (Snyk or equivalent) — not as a gate, but as a capability every engineering team has

• Design the program AI-first: a small AppSec team covers the whole org only by leaning on AI-assisted triage and remediation, security review agents in the coding and CI loop, and AI-augmented testing. You set the direction for what that tooling is trusted to do and how its results are validated

• Own the vendor security assessment process — Fingerprint handles sensitive customer data for major enterprise customers; you ensure third parties meet the bar

• Define zero-trust security principles and partner with the Cloud Platform Sr. Manager to embed them in infrastructure: network security, IAM standards, security logging and alerting

• Lead security incident response for application-layer issues and coordinate with Cloud Platform on infrastructure incidents

Leading IT & Compliance

• Manage the Compliance Lead and the IT team (Lead IT Engineer plus an IT Engineer joining soon). They own their domains day to day — SOC 2 Type 2, policy, auditors, IT operations and tooling for a globally distributed org. You provide direction, prioritization, organizational context, and growth support

• Make the cross-functional calls: what compliance frameworks are worth pursuing next to support business needs, where IT investment goes, and how work is prioritized across security, IT, and compliance

• Own the seams between security and the other two functions — access reviews, identity governance, device posture, offboarding rigor, and the link between AppSec controls and compliance evidence — so the security program makes IT and compliance stronger rather than creating parallel work

• Represent IT health and compliance status to leadership and in enterprise sales cycles alongside your team

Cross-functional Leadership & Communication

• Proactively communicate security posture, compliance status, and IT health to the VP Engineering — come with recommendations, not status updates

• Work with Engineering leadership to embed security practices across product teams — not as a compliance checkpoint but as a capability they value

• Represent Fingerprint's security and compliance posture to enterprise customers, prospects, and auditors

What We're Looking For

Required

•
Application security depth: 7+ years in security with substantial hands-on AppSec experience — you've built or significantly matured an AppSec program, run security reviews and threat modeling, owned vulnerability management (Snyk or equivalent), and worked with penetration testers. You're credible in a room with senior engineers talking about secure design, OWASP, and…