Backed by Index.
About the role
Footprint sells trust to banks and fintechs: verify an identity, vault the PII, and prove to an auditor that every step was done correctly. The architecture reflects four years of that job. Identity records live in an AWS Nitro Enclave-backed vault as an append-only ledger, and our SDKs collect sensitive data straight from end-user devices.
What they're looking for
- 5+ years of hands-on security engineering - application security, infrastructure security, or both
- You understand encryption, key management, and access control well enough to audit a production system holding millions of PII records, and to say precisely where it's weakest
- You know how code execution environments get escaped, how to enforce least privilege on ephemeral compute, and how cross-tenant leaks actually happen
- You've done offensive work - pen testing, threat modeling, or vulnerability research - and it changed how you build
- You've secured AWS environments hands-on: IAM, VPC, KMS, CloudTrail, GuardDuty
- You've been through a SOC 2 or PCI DSS audit and translated real controls into evidence an auditor accepted
More about this role
Footprint is the agentic platform that learns your compliance program and runs it end to end.
Compliance teams at banks and fintechs are drowning in financial crimes investigations. Transaction volumes are surging, regulators keep raising the bar, and the work still runs on manual review queues stitched together from legacy vendors. Percy, our agentic system, learns each team's procedures and makes the same calls their analysts would: clearing false positives, escalating real risk, writing the case narrative, and documenting every decision for audit. It cuts review workloads by 70%+.
The harder problem is underneath. Every investigation is grounded in the data sources compliance teams already trust, and every case commits to an organizational memory that compounds — so a pattern one analyst caught in March surfaces automatically in October, across KYC, EDD, sanctions, and monitoring. Whether the team is five analysts or 500, they share one brain. Every memory carries provenance. Agents propose; humans approve. That's four years of identity infrastructure sitting under the agent, and it's the part nobody can bolt on later.
We're backed by QED, Index, and Box Group, and trusted by...
Browse similar: Startup jobs