Remote Product Security Engineer – Early‑Career Impact

Affirm; Oshawa; On-site; CAD 133,000 - 183,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code. You will assess risks, support vulnerability management, and contribute lightweight tooling and automation to scale AppSec across affirm.

This role suits someone with hands-on software or security experience and an interest in offensive security, secure coding guidance, and risk-based decision making, working remotely in Canada.

Qualifications

• 0–2+ years of experience in application security, software engineering, or security-related roles.
• Foundational programming ability in Python, JavaScript/TypeScript, or similar.
• Comfort reading and reasoning about code, including unfamiliar bases.
• Experience using Git/GitHub or similar workflows (PRs, reviews, tracking).
• Some hands-on experience building or testing software and automation scripts.

Responsibilities

• Identify application security risks with product and engineering teams and frame them as business risks.
• Read code, configurations, PRs, logs, and docs to locate security risks and mitigate them.
• Contribute small code changes, scripts, detections, tests, or automation to improve AppSec workflows.
• Review code changes in GitHub, participate in PR discussions, and track remediation work.
• Help triage and remediate vulnerabilities from testing, bug reports, and security tooling.

Skills

Python

JavaScript/TypeScript

Git & GitHub

OWASP Top 10

Vulnerability management

Automation scripts

Offensive security mindset

Risk-based reasoning

Communication skills

Tools

Burp Suite

GitHub

Job description

Affirm is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code. You will assess risks, support vulnerability management, and contribute lightweight tooling and automation to scale AppSec across affirm.

This role suits someone with hands-on software or security experience and an interest in offensive security, secure coding guidance, and risk-based decision making, working remotely in Canada.