Junior Application Security Engineer — Secure Apps

Affirm; London; On-site; CAD 133,000 - 183,000; Full time

Benefits offered by this job

Health care coverage

Time off

Stock Purchase Plan

Job summary

Affirm is seeking an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code. You will help assess application risks, support vulnerability management, and contribute lightweight tooling, automation, and code-informed analysis that helps AppSec scale across Affirm.

This role is a great fit for someone with hands-on software or security experience who is actively developing offensive security skills and applying them in a product-minded,

Qualifications

• 0–2+ years of experience in application security or related fields.
• Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
• Comfort reading, navigating, and reasoning about code, even in unfamiliar codebases.
• Experience using Git and GitHub or similar version-control workflows, including branches, commits, pull requests, code review, issues, or project tracking.
• Some hands-on experience building, testing, breaking, or securing software.
• Foundational understanding of common web, API, mobile, cloud, and application security risks.
• Interest in offensive security and practice like certifications or labs.

Responsibilities

• Partner with product and engineering teams to identify application security risks and frame them as clear business risks, launch options, and recommended steps.
• Read application code, configuration, pull requests, logs, and documentation to understand system operation and security risks.
• Contribute small code changes, scripts, detections, tests, or automation to improve AppSec workflows.
• Review code changes in GitHub, understand engineering context, participate in PR discussions, track remediation.
• Evaluate vulnerabilities from internal testing, bug bounty, tooling, or tests and help prioritize remediation.

Skills

Python

JavaScript/TypeScript

Git/GitHub

Code reading

Automation scripting

Tools

GitHub

Burp Suite

Job description

Affirm is seeking an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code. You will help assess application risks, support vulnerability management, and contribute lightweight tooling, automation, and code-informed analysis that helps AppSec scale across Affirm.

This role is a great fit for someone with hands-on software or security experience who is actively developing offensive security skills and applying them in a product-minded,