Senior Manager, Application Security - Fingerprint

About Fingerprint

Fingerprint empowers enterprises to detect and stop online fraud with the world’s most accurate device identification. We lead our industry with bleeding-edge identification capabilities and work on turning new ideas and discoveries in the fraud detection space into reality. Our customers range from innovative startups to leading enterprise companies, including Plaid, Dropbox, and Booking.com.

Fingerprint is a globally dispersed, 100% remote company. We were named on the 2026 Forbes Best Startup Employers list and ranked #803 on the 2026 Inc. 5000 list of America’s fastest-growing private companies. We have raised $77M and are backed by Craft Ventures, Nexus Venture Partners, and Uncorrelated Ventures.

---

As Fingerprint scales with large enterprise customers in financial services and fraud prevention, we're investing in application security as a dedicated, first-class discipline. We're looking for a Senior Manager, Application Security to lead that investment, reporting directly to the VP of Engineering. You will personally own and build the AppSec program, and you will also manage a small team of experienced practitioners who run IT operations and compliance.

This is a VP-direct role with high autonomy and high visibility. Enterprise customers regularly ask about Fingerprint's security posture. You'll be the person who owns that answer.

Your Mission

• Own and build application security — Define the AppSec roadmap, stand up the review and vulnerability management processes, and embed security-by-default practices across the engineering org.
• Lead a small team of experienced practitioners in IT and compliance — Give direction, context, prioritization, and air cover to the Lead IT Engineer and Compliance Lead while ramping up quickly on their domains.
• Be the security voice to customers and leadership — Represent Fingerprint's security posture credibly, own the security questionnaire process, and communicate risk to leadership.
• Unify the function over time — Bring security, IT, and compliance under a coherent strategy with shared standards, shared risk language, and a scalable roadmap.

What You'll Do

Application Security (Primary Focus)

• Define and own Fingerprint's application security roadmap: vulnerability management, threat modeling, and security review processes for new features.
• Personally drive AppSec work in the early phase — triage findings, run security reviews, and partner with engineers on remediation.
• Build security-by-default practices into engineering workflows (secure SDLC, dependency and secrets hygiene, CI-integrated scanning like Snyk).
• Design the program AI-first: lean on AI-assisted triage, remediation, security review agents, and AI-augmented testing.
• Own the vendor security assessment process to ensure third parties meet enterprise standards.
• Define zero-trust security principles and partner with the Cloud Platform team to embed them in infrastructure.
• Lead security incident response for application-layer issues.

Leading IT & Compliance

• Manage the Compliance Lead and IT team, providing direction, prioritization, organizational context, and growth support.
• Make cross-functional calls on compliance frameworks and IT investments.
• Own the seams between security, access reviews, identity governance, device posture, and compliance evidence.
• Represent IT health and compliance status to leadership and in enterprise sales cycles.

Cross-functional Leadership & Communication

• Proactively communicate security posture, compliance status, and IT health to the VP Engineering with recommendations.
• Work with Engineering leadership to embed security practices across product teams.
• Represent Fingerprint's security and compliance posture to enterprise customers, prospects, and auditors.

What We're Looking For

Required

• Application security depth: 7+ years in security with substantial hands-on AppSec experience (building/maturing programs, threat modeling, vulnerability management, penetration testing).
• Engineering fluency: Ability to read code, understand modern web/API architectures, and engage with engineers on remediation.
• People leadership: 2+ years managing people, including leading practitioners with deep domain expertise.
• AI-native operator: Daily use of AI agents and understanding of how AI-driven security tooling changes AppSec.
• Fast learner across domains: Ability to grasp new domains (IT and compliance) quickly and speak to them broadly.
• Strategic communicator: Translating security complexity into business language for leadership and customers.

Nice to Have

• IT operations exposure (Okta, endpoint management).
• Compliance / GRC exposure (SOC 2, ISO 27001, GDPR).
• Familiarity with the security tooling stack: Snyk, Wiz, Cloudflare, Okta.
• Experience with AI-native security tooling for code analysis and auto-remediation.
• Enterprise security questionnaire experience.
• Experience in a high-growth SaaS company.

Compensation & Transparency

At Fingerprint, we believe in pay transparency. Salaries are based on function, level, and geographic location, benchmarked against similar stage growth companies. The base salary range for this role is $177k - $240k.