Senior Manager, Application Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Define and take ownership of Fingerprint's application security roadmap.

• Establish processes for review and vulnerability management.

• Integrate security-by-default practices throughout engineering.

• Lead a small team comprised of seasoned IT and compliance professionals.

• Represent Fingerprint's security posture to customers, prospects, partners, auditors, and leadership.

• Unite security, IT, and compliance under a cohesive strategy.

• Drive AppSec initiatives, including triage, security reviews, and remediation support.

• Develop secure SDLC practices, dependency and secrets hygiene, and CI-integrated scanning methods.

• Design and oversee AI-assisted security tools and validation processes.

• Manage vendor security assessments.

• Define zero-trust principles and collaborate on network security, IAM, logging, and alerting.

• Lead incident response for application-layer security issues.

• Supervise the Compliance Lead and IT team.

• Make decisions regarding compliance frameworks, IT investments, and cross-functional priorities.

• Oversee access reviews, identity governance, device posture, offboarding, and compliance evidence.

• Communicate security posture, compliance status, and IT health to the VP of Engineering.

• Collaborate with Engineering leadership to integrate security practices across product teams.

⛳️ Requirements

• Over 7 years of experience in security, with significant hands-on application security expertise.

• Proven experience in building or significantly enhancing an AppSec program.

• Familiarity with security reviews, threat modeling, vulnerability management, and penetration testing.

• Credibility in discussing secure design, OWASP guidelines, and real-world exploitation with senior engineers.

• Ability to read code and comprehend modern web/API architectures.

• Minimum of 2 years of people management experience.

• Daily engagement with AI agents and an understanding of AI-driven security tools and AI-generated code.

• Capability to quickly grasp IT and compliance domains.

• Skill in translating complex security concepts into business language for leadership and customers.

• Preferred: Experience in identity and access management, endpoint management, or remote workforce IT.

• Preferred: Familiarity with SOC 2, ISO 27001, or GDPR.

• Preferred: Knowledge of tools like Snyk, Wiz, Cloudflare, and Okta.

• Preferred: Experience with AI-assisted code analysis, triage, auto-remediation, or autonomous testing.

• Preferred: Experience with enterprise security questionnaires.

• Preferred: Background in a high-growth SaaS company.

• Must be eligible to work from the candidate's home location; Fingerprint does not sponsor visas.

🏝️ Benefits

• Fully remote work environment.

• High autonomy and visibility in the role.

• Direct line to the VP with genuine autonomy.

• Opportunity to shape a dedicated AppSec function with the support of the VP.

• A strong and experienced IT and compliance team already established.

• Significant customer visibility.

• Chance to influence expanded compliance frameworks and enterprise requirements.

• Inclusive work culture.

• Encouragement for individuals from underrepresented groups in tech to apply.