<div>Fingerprint empowers developers to stop online fraud at the source. We work on turning radical new ideas in the fraud detection space into reality. Our products are developer-focused and our clients range from solo developers to publicly traded companies. We are a globally dispersed, 100% remote company with a strong open-source focus. Our flagship open-source project is <a href="https://github.com/fingerprintjs/fingerprintjs" target="_blank">FingerprintJS</a> (20K stars on GitHub). <a href="https://www.crunchbase.com/organization/fingerprintjs" target="_blank">We have raised $77M </a>and are backed by Craft Ventures (previously invested in <a href="https://www.tesla.com/" target="_blank">Tesla, </a><a href="https://facebook.com/" target="_blank">Facebook, </a><a href="https://www.airbnb.com/" target="_blank">Airbnb </a>), Nexus Venture Partners (previously invested in <a href="https://www.postman.com/">Postman</a>, <a href="https://www.apollo.io/">Apollo.io,</a> <a href="https://min.io/">MinIO</a>, Druva) and Uncorrelated Ventures (previously invested in <a href="https://redis.io/" target="_blank">Redis, </a><a href="https://rollbar.com/" target="_blank">Rollbar </a>&amp;<a href="https://gradle.org/" target="_blank"> Gradle</a>). We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored.   <hr />      </div>We’re looking for a Web Security Researcher to drive inudstry-leading innovation in bot detection and web security. This role is ideal for a security-focused engineer or researcher with strong reverse engineering skills, a passion for anomaly detection, and a deep understanding of how the web works under the hood. You’ll lead the full research lifecycle from concept through implementation, creating tools and techniques to detect sophisticated bots before they ever reach production. You’ll work alongside a world-class team that values autonomy, speed, and deep technical expertise. What You’ll Do <ul> <li>Set technical direction </li> <li>Research and prototype advanced methods to detect and prevent sophisticated bots</li> <li>Reverse-engineer web automation tools and evasive techniques</li> <li>Build internal tools to test hypotheses and validate detection models</li> <li>Own the entire R&amp;D cycle: from ideation to secure, production-ready implementation</li> </ul> What You Bring <ul> <li>Experience as a technical lead including a demonstrated ability to work with partner teams, identify priorities and align engineers to execute on them</li> <li>Proven ability to design and conduct complex security research projects</li> <li>Deep understanding of web browsers, web automation, and client-side evasion techniques</li> <li>Hands-on experience with JavaScript/TypeScript</li> <li>Strong reverse engineering skills</li> <li>Solid grasp of internet security and privacy mechanisms</li> <li>Ability to thrive in ambiguity and drive projects independently</li> <li>Excellent written and verbal communication in English</li> </ul> Bonus Points For <ul> <li>Experience developing or bypassing bot detection systems</li> <li>Familiarity with bot mitigation strategies at scale</li> <li>Contributions to open-source security or reverse engineering tools</li> </ul> Compensation: For US-based employees, the cash compensation range for this role is $150,000 – $220,000. We set standard ranges for all US roles based on function, level, and geographic location, benchmarked against similar stage growth companies. To comply with local legislation and provide greater transparency, we share salary ranges on all job postings. However, these ranges are specific to the hiring location and may differ within or outside the US.<div>We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored. Offers vary depending on, but not limited to, relevant experience, education, certifications/licenses, skills, training, and market conditions.  Due to regulatory and security reasons, there’s a small number of countries where we cannot have Fingerprint teammates based. Additionally, because Fingerprint is an all-remote company and people can join our workforce from almost any country, we do not sponsor visas. Fingerprint teammates need to be authorized to work from their home location. We are dedicated to creating an inclusive work environment for everyone. We embrace and celebrate the unique experiences, perspectives and cultural backgrounds that each employee brings to our workplace. Fingerprint strives to foster an environment where our employees feel respected, valued and empowered, and our team members are at the forefront in helping us promote and sustain an inclusive workplace. We highly encourage people from underrepresented groups in tech to apply. If you are applying as a resident of California, please read our CCPA notice <a href="https://dev.fingerprint.com/docs/dpa-ccpa" target="_blank">here</a> If you are applying as a resident of the EU, please read our GDPR notice <a href="https://dev.fingerprint.com/docs/dpa-gdpr" target="_blank">here</a></div>