Application Security Engineer

About Fin and the Role

Fin, now part of Salesforce, leads in enabling businesses to deliver outstanding customer experiences using AI-driven support. Our AI Agent Fin excels at providing seamless, round-the-clock customer service across sales, service, and ecommerce channels. Integrated closely with Intercom help desk and Salesforce's industry-leading AI CRM, we are shaping the future of customer engagement by combining human expertise with advanced AI technology. We are seeking motivated professionals eager to drive innovation in AI-powered customer service through robust security engineering.

Role Overview

The Security Engineering team at Fin takes on a unique role by owning and managing critical security services, creating security features facing customers, and collaborating with engineering teams to embed secure development practices by default. Responsibilities include maintaining tier-zero services like authentication, SAML/SSO, teammate activity tracking, and malicious URL scanning that underpin customer trust and safety.

Key Responsibilities

• Develop and maintain essential tier-zero security services that facilitate secure Fin deployment and management.
• Create, enhance, and evolve security features including authentication, SAML/SSO, permission frameworks, logging, and enterprise security controls.
• Collaborate with engineering teams throughout the software development lifecycle to ensure secure product development.
• Conduct architecture reviews, threat modeling, and security assessments for new features and systems.
• Build tooling, automation, and developer utilities to support scalable secure development.
• Contribute to and lead the definition of secure development standards and best practices.
• Oversee application security initiatives across software lifecycles to identify and remediate risks early.
• Engage in shared on-call rotations and lead responses to security incidents, including investigations and resolutions.
• Drive security projects from initial problem identification through to implementation and delivery of measurable improvements.
• Work closely with AI product teams to evaluate and mitigate security risks specific to AI-driven solutions.
• Support Fin's AI-first security approach by developing AI-powered detection methods, red-team automation, continuous monitoring, and innovative defenses.
• Facilitate secure use of AI-assisted development tools and workflows within engineering teams.

Desired Qualifications

• Experienced in application, product, or security engineering within SaaS environments.
• Strong software engineering background with demonstrated ability to design, build, and manage production-grade systems.
• Profound knowledge of modern application security threats, secure coding practices, and threat modeling methodologies.
• Expertise in building or securing authentication, authorization, identity, or enterprise security systems.
• Experience performing architecture reviews and security evaluations for complex architectures.
• Hands-on involvement in security incident management, including leading investigations and remediations.
• Proficient in programming with a focus on creating security automation and developer-focused tools.
• Comfortable leveraging AI-assisted development tools to enhance engineering productivity.
• Excellent communicator with the ability to convey security principles effectively to engineering teams.
• Pragmatic approach in balancing security requirements with user impact and engineering agility.

Additional Preferred Skills

• Background in developing or managing authentication, SAML/SSO, identity management, or access control solutions.
• Familiarity with securing AI-enhanced products, including knowledge of large language models, agentic systems, retrieval architectures, or AI integration security.
• Experience in building scalable security automation platforms.
• Understanding of cloud security principles, infrastructure protection, and distributed systems.
• Exposure to both large SaaS ecosystems and rapidly scaling technology organizations.

Company Culture and Policies

Fin embraces a hybrid work model, expecting employees to be onsite a minimum of three days per week to foster collaboration and maintain a strong company culture. We prioritize an open, inclusive, and respectful workplace, focusing on shared values and collective goals while avoiding divisive social or political discourse in or out of the workplace. Equal opportunity and non-discrimination are core principles, ensuring merit-based hiring and career progression free from any bias related to protected characteristics.

Additional Information

Compensation varies by location and role specifics. Benefits have been designed to support employees' wellbeing, family, time off, and financial security, adhering to local standards and regulations. Our hiring practices comply with fair chance ordinances and initiatives, giving consideration to applicants with arrest or conviction records where qualified.