Product Security Engineer II — Remote, Build Secure Products

Affirm; Denver (CO); On-site; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

Job summary

Affirm is seeking an early-career Application Security Engineer to assess risks, support vulnerability management, and partner with product and engineering on secure design decisions. You will contribute lightweight tooling, automation, and code-informed analysis to scale AppSec across Affirm.

The role emphasizes reading code, collaborating across teams, and building practical security solutions in a remote-first environment with strong growth potential.

Qualifications

• 0–2+ years in application security or related fields.
• Foundational programming ability in one or more languages listed (Python/JS/Kotlin).
• Comfort reading and reasoning about code in unfamiliar codebases.
• Experience with Git/GitHub workflows and PR reviews.
• Hands-on experience building or securing software (internships, labs, or projects).
• Ability to write scripts or small programs to automate tasks.

Responsibilities

• Partner with product and engineering teams to identify application security risks and frame them as business risks and next steps.
• Read application code, configuration, logs, and docs to understand system behavior and risks.
• Contribute small code changes, scripts, detections, or automation to improve AppSec workflows.
• Review code changes in GitHub and participate in PR discussions.
• Evaluate vulnerabilities from internal testing, bug bounty, or tooling and help prioritize remediation.
• Contribute to vulnerability management workflows: triage, severity, remediation guidance, tracking, and reporting.
• Translate findings into repeatable secure coding guidance and checklists.
• Work with engineers to understand system designs, data flows, trust boundaries, and auth models.
• Communicate security findings clearly to technical and non-technical audiences.

Skills

Python

JavaScript/TypeScript

Kotlin

Git & GitHub

Code reading & debugging

Vulnerability management

Risk-based thinking

Communication skills

Team collaboration

Security tooling

Tools

Burp Suite

Job description

Affirm is seeking an early-career Application Security Engineer to assess risks, support vulnerability management, and partner with product and engineering on secure design decisions. You will contribute lightweight tooling, automation, and code-informed analysis to scale AppSec across Affirm.

The role emphasizes reading code, collaborating across teams, and building practical security solutions in a remote-first environment with strong growth potential.