Product Security Engineer II — Secure by Design

Affirm; Salt Lake City (UT); On-site; USD 146,000 - 206,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

Employee stock purchase plan (ESPP)

Job summary

Affirm is seeking an early‑career Application Security Engineer to help assess risks, support vulnerability management, and collaborate with engineering on secure design decisions. You will contribute lightweight tooling, automation, and code‑informed analysis to scale AppSec across Affirm.

The role emphasizes hands‑on coding, offensive/defensive security skills, and translating findings into repeatable security guidance, while partnering with product, engineering, and risk teams in a

Qualifications

• Foundational programming ability in Python, JavaScript/TypeScript, or similar.
• Comfort reading, navigating, and reasoning about code.

Responsibilities

• Identify application security risks with product and engineering teams.
• Read code, configuration, PRs, logs, and docs to understand system behavior.
• Contribute small code changes, scripts, and automation to improve AppSec workflows.
• Review code in GitHub; track remediation work with engineers.
• Evaluate vulnerabilities from internal tests, bug bounties, tooling, and pen tests.

Skills

Python

JavaScript/TypeScript

Git/GitHub

Security awareness

Code reading

Threat modeling

Job description

Affirm is seeking an early‑career Application Security Engineer to help assess risks, support vulnerability management, and collaborate with engineering on secure design decisions. You will contribute lightweight tooling, automation, and code‑informed analysis to scale AppSec across Affirm.

The role emphasizes hands‑on coding, offensive/defensive security skills, and translating findings into repeatable security guidance, while partnering with product, engineering, and risk teams in a