{"id":2736987,"url":"https://alion.io/job/fingerprint-senior-manager-application-security","title":"Senior Manager, Application Security","company":{"id":577,"name":"Fingerprint","domain":"fingerprint.com","url":"https://alion.io/company/fingerprint","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":177000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Apollo","optional":false},{"name":"Dropbox","optional":false},{"name":"Gradle","optional":false},{"name":"IAM","optional":false},{"name":"MinIO","optional":false},{"name":"OWASP","optional":false},{"name":"Postman","optional":false},{"name":"Redis","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Cloudflare","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"Java","optional":true},{"name":"Okta","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-10-16T19:12:45Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-16T23:18:41Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Fingerprint empowers enterprises to detect and stop online fraud with the world’s most accurate device intelligence. We lead our industry with bleeding-edge identification capabilities and work on turning new ideas and discoveries in the fraud detection space into reality. Our customers range from innovative startups to leading enterprise companies, including Plaid, Dropbox, and Booking.com. \nFingerprint is a globally dispersed, 100% remote company. We were named on on the 2026 Forbes Best Startup Employers list and ranked #803 on the 2026 Inc. 5000 list of America’s fastest-growing private companies. \nWe have raised $77M and are backed by Craft Ventures (Tesla,Facebook, Airbnb), Nexus Venture Partners ( Postman, Apollo.io, MinIO, Druva) and Uncorrelated Ventures ( Redis,Rollbar, Gradle).\nAs Fingerprint scales with large enterprise customers in financial services and fraud prevention, we're investing in application security as a dedicated, first-class discipline. We're looking for a Senior Manager, Application Security to lead that investment, reporting directly to the VP of Engineering. You will personally own and build the AppSec program, and you will also manage a small team of experienced practitioners who run IT operations and compliance.\nThis is a VP-direct role with high autonomy and high visibility. Enterprise customers regularly ask about Fingerprint's security posture. You'll be the person who owns that answer.\nYour Mission\nOwn and build application security - This is the center of gravity of the role. Define the AppSec roadmap, stand up the review and vulnerability management processes, and embed security-by-default practices across the engineering org. You set the standard, you hold it, and you work across teams to make it real\nLead a small team of experienced practitioners in IT and compliance - The Lead IT Engineer and Compliance Lead have deep domain expertise and drive their own work. You give them direction, context, prioritization, and air cover, and you ramp on their domains quickly enough to represent them credibly - you don't need to arrive as an IT or GRC expert\nBe the security voice to customers and leadership - Enterprise customers, prospects, and partners evaluate Fingerprint's security posture. You represent it credibly, own the security questionnaire process, and communicate risk and posture to the VP and leadership team\nUnify the function over time - Security, IT, and compliance have operated as separate workstreams. As you ramp, bring them under a coherent strategy with shared standards, shared risk language, and a roadmap that scales with the business\nWhat You'll Do\nApplication Security (primary focus)\nDefine and own Fingerprint's application security roadmap: vulnerability management, threat modeling, and the security review process for new features and architectural changes - and partner with the Compliance Lead, who runs the penetration testing program today, to connect its findings to engineering remediation\nPersonally drive AppSec work in the early phase - triage findings, run security reviews, partner with engineers on remediation - while building the program so it scales beyond you\nBuild security-by-default practices into engineering workflows - secure SDLC, dependency and secrets hygiene, CI-integrated scanning (Snyk or equivalent) - not as a gate, but as a capability every engineering team has\nDesign the program AI-first: a small AppSec team covers the whole org only by leaning on AI-assisted triage and remediation, security review agents in the coding and CI loop, and AI-augmented testing. You set the direction for what that tooling is trusted to do and how its results are validated\nOwn the vendor security assessment process - Fingerprint handles sensitive customer data for major enterprise customers; you ensure third parties meet the bar\nDefine zero-trust security principles and partner with the Cloud Platform Sr. Manager to embed them in infrastructure: network security, IAM standards, security logging and alerting\nLead security incident response for application-layer issues and coordinate with Cloud Platform on infrastructure incidents\nLeading IT & Compliance\nManage the Compliance Lead and the IT team (Lead IT Engineer plus an IT Engineer joining soon). They own their domains day to day - SOC 2 Type 2, policy, auditors, IT operations and tooling for a globally distributed org. You provide direction, prioritization, organizational context, and growth support\nMake the cross-functional calls: what compliance frameworks are worth pursuing next to support business needs, where IT investment goes, and how work is prioritized across security, IT, and compliance\nOwn the seams between security and the other two functions - access reviews, identity governance, device posture, offboarding rigor, and the link between AppSec controls and compliance evidence - so the security program makes IT and compliance stronger rather than creating parallel work\nRepresent IT health and compliance status to leadership and in enterprise sales cycles alongside your team\nCross-functional Leadership & Communication\nProactively communicate security posture, compliance status, and IT health to the VP Engineering - come with recommendations, not status updates\nWork with Engineering leadership to embed security practices across product teams - not as a compliance checkpoint but as a capability they value\nRepresent Fingerprint's security and compliance posture to enterprise customers, prospects, and auditors\nWhat We're Looking For\nRequired\n Application security depth: 7+ years in security with substantial hands-on AppSec experience - you've built or significantly matured an AppSec program, run security reviews and threat modeling, owned vulnerability management (Snyk or equivalent), and worked with penetration testers. You're credible in a room with senior engineers talking about secure design, OWASP, and real-world exploitation\nEngineering fluency: You can read code, understand modern web/API architectures, and engage with engineers on remediation without needing a translator\nPeople leadership: 2+ years managing people - you've led practitioners, including ones with deeper domain expertise than you, and you know how to give direction without micromanaging\nAI-native operator: You use AI agents daily in your own work and understand how AI-driven security tooling and AI-generated code change the shape of an AppSec program - you'll be building one, not running a 2022 playbook\nFast learner across domains: You can grasp a new domain quickly, ask the right questions, and speak to it broadly and credibly within months - this is how you'll ramp on IT and compliance\nStrategic communicator: You translate security complexity into business language for leadership and customers - risk framing, not technical jargon\nNice to Have\n IT operations exposure: Identity and access management (Okta or equivalent), endpoint management, or remote workforce IT - helpful, but your IT team brings the operational depth\nCompliance / GRC exposure: SOC 2, ISO 27001, or GDPR experience - helpful, but your Compliance Lead owns the program day to day\n Security tooling stack familiarity: Snyk (vulnerability management), Wiz (cloud security posture), Cloudflare (WAF/edge), Okta - these are live in Fingerprint's environment\nAI-native security tooling: You've run or evaluated AI-assisted code analysis, triage, auto-remediation, or autonomous testing in a real program, and have a view on how it changes what an AppSec team should look like and what it can safely be trusted to block or fix\nEnterprise security questionnaire experience: You've answered rigorous due diligence questionnaires from financial institution InfoSec teams and know what \"good\" looks like on both sides of that process\nExperience in a high-growth SaaS company where security had to keep pace with rapid product and customer growth without becoming a bottleneck\nThe Unique Shape of This Role\nThis role is AppSec-first with a management scope that spans IT and compliance. That shape is deliberate. Application security is where we're investing next, and we want someone who can personally build it - not just oversee it. At the same time, IT and compliance are already run by experienced practitioners who don't need a domain expert over them; they need a leader who gives them direction, context, and prioritization.\nWhat this means in practice: you will be hands-on in AppSec and hands-off-but-accountable in IT and compliance. We don't expect you to arrive as an expert in IT operations or GRC. We do expect you to learn those domains quickly - well enough within your first few months to evaluate your team's work, make prioritization calls across all three disciplines, and represent each of them credibly to leadership and customers. The judgment to know when to rely on your team vs. when to drive the decision yourself is what distinguishes the right candidate.\nThis is a role for someone who is still a strong practitioner in AppSec and has grown into leading people - not for someone who has moved entirely out of technical work, and not for a pure individual contributor who hasn't managed before.\nWhy This Role?\nShape a dedicated AppSec function from its first days, with backing: This is a sponsored, prioritized investment, and you have the mandate and the VP's support to build it your way\nVP direct line with genuine autonomy: You own the function. You come to the VP with recommendations, not requests for direction\nA strong team already in place: The Lead IT Engineer and Compliance Lead are capable, experienced practitioners who drive their own domains. You're not building IT or compliance from scratch - you're giving them strategic leadership\nHigh customer visibility: Fingerprint serves major enterprise customers in financial services, fraud prevention, and beyond. Security posture is a real differentiator in enterprise sales, and you're the person who owns it\nCompliance maturity to build on: SOC 2 Type 2 is already achieved. The next horizon - expanded frameworks, deeper enterprise compliance requirements - is yours to shape with your Compliance Lead\nA function getting dedicated leadership: Security, IT, and compliance have grown up inside a larger infrastructure group. This role exists because Fingerprint is giving them focused, strategic leadership to reach the next level\n\nCompensation & Transparency\nAt Fingerprint, we believe in pay transparency - it's part of how we operate as a distributed, remote-first team. Salaries are based on function, level, and geographic location, benchmarked against similar stage growth companies. \nBecause this role is open across the United States and can be based anywhere our team members work from, the salary range reflects that geographic breadth: $177k - $240k\n\nSome example salaries for specific locations are below:\nNYC: $209k - $240k\nChicago: $177k - $204k\nFinal offer amounts are determined by multiple factors, including the successful candidate's location, experience, and expertise, and may vary from the amounts listed above.\nDue to regulatory and security reasons, there’s a small number of countries where we cannot have Fingerprint teammates based. Additionally, because Fingerprint is an all-remote company and people can join our workforce from almost any country, we do not sponsor visas. Fingerprint teammates need to be authorized to work from their home location.\nWe are dedicated to creating an inclusive work environment for everyone. We embrace and celebrate the unique experiences, perspectives and cultural backgrounds that each employee brings to our workplace. Fingerprint strives to foster an environment where our employees feel respected, valued and empowered, and our team members are at the forefront in helping us promote and sustain an inclusive workplace. We highly encourage people from underrepresented groups in tech to apply.\nIf you are applying as a resident of California, please read our CCPA notice...","description_format":"text","description_chars":12457,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Fraud Detection","Identity Management"],"lifecycle":[{"event":"open","at":"2026-10-16T19:21:37Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":50,"reasons":["conf:3","win:early"],"computed_at":"2026-10-17T03:13:37Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/fingerprint-senior-manager-application-security","json_url":"https://alion.io/job/fingerprint-senior-manager-application-security.json","meta":{"generated_at":"2026-10-17T03:13:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4246,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":577},"rest":"https://alion.io/mcp/rest/get_company?id=577"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffingerprint-senior-manager-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffingerprint-senior-manager-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffingerprint-senior-manager-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fingerprint-senior-manager-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffingerprint-senior-manager-application-security"}]}