Product Security Engineer II — Remote & Impact‑Driven Security

Associated Builders and Contractors (ABC); Miami (FL); On-site; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is reinventing credit to make it more honest and friendly, with a focus on secure product launches. We seek an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code.

You will help assess application risks, support vulnerability management, partner with engineering teams on secure design decisions, and contribute lightweight tooling and automation to scale AppSec across affirm.

Qualifications

• 0-2+ years of experience in application security or related field.
• Foundational programming in Python or JavaScript/TypeScript.
• Comfort reading, navigating, and reasoning about code, even in unfamiliar codebases.
• Experience with Git and GitHub workflows, including branches, commits, pull requests, code review, issues, or project tracking.
• Hands-on experience building, testing, breaking, or securing software.
• Understanding of common web, API, mobile, cloud security risks (OWASP, etc.).

Responsibilities

• Identify application security risks with product and engineering teams and frame them as business risks with launch options and next steps.
• Read application code, configuration, PRs, logs, and docs to understand system behavior and security risks.
• Contribute small code changes, scripts, detections, tests, or automation to improve AppSec workflows.
• Review code in GitHub, discuss engineering context, track remediation work with engineers.
• Evaluate vulnerabilities from testing, bug bounty reports, security tooling, or tests and prioritize remediation.
• Translate recurring findings into secure coding guidance, checklists, or lightweight automation.
• Explain security issues clearly to technical and non-technical audiences, including risk and mitigations.

Skills

Python

JavaScript/TypeScript

Git/GitHub

Code reading

Security risk identification

Tools

Burp Suite

Security tooling

Job description

Affirm is reinventing credit to make it more honest and friendly, with a focus on secure product launches. We seek an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code.

You will help assess application risks, support vulnerability management, partner with engineering teams on secure design decisions, and contribute lightweight tooling and automation to scale AppSec across affirm.