Application Security Engineer

What's the opportunity?

Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.

Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities.

The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the most ambitious AI-powered products in customer service. We're taking an AI-first approach to security, exploring areas such as AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.

What will I be doing?

• Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin.
• Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and other enterprise security controls.
• Partner with engineering teams throughout the software development lifecycle to build secure products and services.
• Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems.
• Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable.
• Contribute to secure development standards, guidance, and best practices across Fin.
• Lead application security initiatives across the software development lifecycle, helping teams identify and address security risks early.
• Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts.
• Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
• Partner with teams building AI-powered products to assess and mitigate emerging security risks.
• Help shape Fin's AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities.
• Support the secure adoption of AI-assisted software development tools and engineering workflows.