Senior Application Security Engineer - remote within EMEA

In November 2024, Printful and Printify came together as two equals and merged to form a global on-demand powerhouse. This role will involve working across our two platforms and brands, a unique and special challenge. To learn more about the merger, check out our blog post.

About Us:

Both Printify and Printful are pioneering production on-demand companies and platforms established in Latvia but with a global customer base.

Printify is bringing the dream of financial freedom and business ownership to the world by connecting e-commerce entrepreneurs with over 100 print-on-demand facilities around the globe. 

Printful has built world-class in-house production facilities and helps people to build their brands, empowering thousands of businesses—including iconic names like Coca-Cola and MTV. 

Our team is at the heart of our success. You’ll be part of a culture where everyone is respected, included, and encouraged to grow. We value continuous learning, uphold a high work ethic, and have fun along the way.

About the Role:

Own and scale our Application Security program. You'll set the strategy, embed security into every stage of the SDLC, and coach teams to raise our "secure by default" bar. This is a high-impact role for a senior engineer who's comfortable rolling up their sleeves, leading cross-functionally, implementing automations and measuring outcomes.

Your Daily Tasks Will Entail:

• Own the AppSec strategy & roadmap by defining objectives, guardrails, and KPIs (e.g., vuln MTTR by severity, % coverage of SAST/DAST/SCA, secret-leak MTTR, etc.).

• Build/maintain internal tools (including ML-assisted where useful) that make the secure path the easy path.

• Lead threat modeling and architecture reviews; author/maintain secure coding guidelines for services/APIs, ensuring design-time security.

• Own intake, triage, SLAs, retests, and report to security engineering leadership.

• Conduct regular security assessments to identify vulnerabilities/risks in applications and software before they emerge.

• Partner with product & compliance by mapping SDLC controls to frameworks, scoping engagements, contributing to IR playbooks/table-tops for application-layer incidents.

Your Qualifications:

• 7+ years in application security / software engineering, and strong automation mindset and AppSec-related certifications is a plus.

• Strong Python coding; ability to review TypeScript/JavaScript and PHP.

• Depth in threat modeling, secure design patterns, authN/authZ (OAuth2/OIDC, JWT), crypto hygiene, API/web security.

• Excellent communicator and influencer: i.e. able to drive healthy change across teams and balance risk, delivery, and developer experience.

• Nice to have experience: GraphQL/mobile security, privacy-by-design, LLM application security (prompt injection, data leakage), container security, SOC 2/ISO 27001, SLSA.

What We Offer:

• Non-boring cybersecurity work: real-world threats, high-signal problems, measurable impact.

• Developer-first culture: time for threat modeling, champions program, and office hours.

• Be part of a friendly, inclusive, and global team.

• An opportunity to work remotely or in a modern and welcoming office in Rīga or Tallinn, or from our co-working space in Barcelona.

• Health insurance.

• 2 extra paid days off (either consecutively or separately) to focus on your mental or physical well-being.

• 1 extra paid day off to celebrate a Birthday or any other celebration of your choice.

• Flexible working hours (start your day as late as 11 a.m.).

• Learning Budget to support your professional development.

• Access to mentorship, internal meetups, and hackathons both on-site and online.

• Exciting team-building events and parties you’ll never forget! 

• Free and healthy lunch when you work from the Rīga office.

• Design and order your own merch using our platforms with employee discount.

• Apple MacBook laptop as your standard work equipment.

We are an equal-opportunity workplace. We’re committed to diversity and inclusion and make hiring decisions based solely on qualifications, merit, and work experience.

If you think you’d excel in this role, send us your resume in English, showing us why you are the right person for the job. 

Interested, but don’t think this is the right fit for you? Feel free to share it with friends and check out other open positions at our career site. We’re always looking for creative and driven minds to join our ever-growing team!