Application Security Engineer

Intercom is hiring an Application Security Engineer for a hybrid role in Chicago, focused on building tier-zero application security capabilities and customer-facing security features.

Responsibilities

• Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin
• Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and other enterprise security controls
• Partner with engineering teams across the software development lifecycle to build secure products and services
• Conduct architecture reviews, threat modeling, and security assessments for new features and systems
• Build security tooling and automation and developer-facing building blocks to make secure development easier and more scalable
• Contribute to secure development standards, guidance, and best practices across Fin
• Lead application security initiatives throughout the development lifecycle to help teams identify and address security risks early
• Participate in a shared on-call rotation and lead security incident response, including investigation and remediation
• Drive security initiatives from problem definition through design, implementation, and measurable outcomes
• Collaborate with teams building AI-powered products to assess and mitigate emerging security risks
• Help shape Fin’s AI-first security approach, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities
• Support secure adoption of AI-assisted software development tools and related engineering workflows

Requirements

• Proven application security, product security, or security engineering experience in a SaaS environment
• Strong software engineering skills with experience designing, building, and operating production systems
• Deep understanding of modern application security threats, secure software development practices, and threat modeling
• Experience designing, building, or securing authentication, authorization, identity, or other enterprise security capabilities
• Experience conducting architecture reviews and security assessments for complex systems
• Hands-on security incident response experience, including leading investigations and remediation efforts
• Strong programming skills and experience building tools, automation, or developer-focused solutions
• Comfort using modern AI-assisted development tools to improve productivity and engineering effectiveness
• Ability to communicate security concepts clearly and collaborate effectively with engineering teams
• Pragmatic approach to balancing security, customer impact, and engineering velocity

Bonus Skills & Attributes

• Experience building or owning authentication, SAML/SSO, identity, or access management capabilities
• Experience securing AI-powered products or familiarity with security considerations for large language models, agentic systems, retrieval-based architectures, or AI tool integrations
• Experience building security automation or security-focused platform capabilities at scale
• Familiarity with cloud security, infrastructure security, or distributed systems
• Experience working across both large-scale SaaS environments and high-growth companies
• Proof of eligibility to work in the United States is required

Compensation and Location

• Base salary range (Greater Chicago Area): USD 190,000 - 210,000 per year
• Actual base pay will depend on factors such as education, skills, experience, and location
• Base pay range is subject to change and may be modified in the future
• Regular employees may be eligible for the corporate bonus program or a sales incentive (target included in OTE) plus RSUs (Restricted Stock Units)
• In the United States, compensation may be determined by location, job level, and job-related knowledge, skills, and experience
• Certain roles may be eligible for incentive compensation, equity, and benefits

Hybrid Working Policy

• Fin has a hybrid working policy
• Employees are expected to be in the office at least three days per week

Policies

• Fin has a radically open and accepting culture
• Fin’s communications policy does not advocate on behalf of the company or employees on social or political topics out of internal or external communications
• Salesforce is an equal opportunity employer with a policy of non-discrimination
• Salesforce will consider qualified applicants with arrest and conviction records pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring
• Offerings vary by location in line with local practices and requirements