Product Security Engineer II — Build Trusted, Secure Apps

Affirm; New York (NY); Remote; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health insurance

Equity/Stock options

Flexible spending accounts

Generous time off

Job summary

Affirm is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code, and who can contribute to vulnerability management and lightweight tooling. You will partner with product and engineering teams to identify security risks, review code in GitHub, and help prioritize remediation based on real-world risk.

You will apply secure-by-design thinking, learn from offensive and defensive security work, and grow skills across security tooling, automation, and

Qualifications

• 0–2+ years of experience in application security or related fields.
• Foundational programming ability in Python, JavaScript/TypeScript, Kotlin, or similar.
• Comfort reading, navigating, and reasoning about codebases.
• Experience using Git and GitHub workflows, including PRs, reviews, and issues.
• Hands-on experience building, testing, breaking, or securing software.

Responsibilities

• Partner with product and engineering to identify security risks and frame them as business risks with next steps.
• Read application code, configurations, logs, and docs to understand system behavior and risks.
• Contribute small code changes, scripts, and automation to improve AppSec workflows.
• Review code changes in GitHub and track remediation efforts with engineers.
• Evaluate vulnerabilities from internal tests, bug reports, and tooling; help prioritize and remediate based on risk.
• Contribute to vulnerability management workflows: triage, validation, remediation guidance, and reporting.
• Translate findings into reusable security guidance, checklists, or automation.

Skills

Python / JavaScript/TypeScript

Git / GitHub

Code reading & security reasoning

Vulnerability management

OWASP Top 10

Offensive security interest

Scripting / automation

Risk-based thinking

Product & engineering empathy

Communication skills

Tools

Burp Suite

Job description

Affirm is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code, and who can contribute to vulnerability management and lightweight tooling. You will partner with product and engineering teams to identify security risks, review code in GitHub, and help prioritize remediation based on real-world risk.

You will apply secure-by-design thinking, learn from offensive and defensive security work, and grow skills across security tooling, automation, and