Remote AppSec Engineer – Early Career

Affirm; Portland (OR); On-site; USD 146,000 - 206,000; Full time

Benefits offered by this job

Health care coverage

ESPP - Employee Stock Purchase Plan

Time off

Flexible Spending Wallets

Job summary

Affirm is building a security-focused AppSec team and seeks an early-career Application Security Engineer. You will help assess risks, support vulnerability management, and contribute lightweight tooling while collaborating with product and engineering to launch secure features.

This role emphasizes hands-on code work, understanding system designs, and communicating risk clearly to diverse audiences. Remote-first with US-wide opportunities.

Qualifications

• Foundational programming ability in Python, JavaScript/TypeScript, Kotlin.
• Comfort reading, navigating, and reasoning about codebases.
• Experience using Git and GitHub workflows.
• Interest in offensive security and security tooling.

Responsibilities

• Identify application security risks with product and engineering teams.
• Read code, configurations, logs, and docs to locate risks.
• Contribute small code changes, tests, or automation for AppSec workflows.
• Review PRs in GitHub and track remediation work.
• Evaluate vulnerabilities from testing, bug bounties, and tooling.
• Translate findings into actionable guidance and reusable patterns.
• Explain security risk and mitigations to technical and non-technical audiences.

Skills

Programming in Python

JavaScript/TypeScript

Kotlin

Reading code

Git and GitHub

Offensive security mindset

Scripting/automation

Security tooling

Tools

GitHub

Burp Suite

Job description

Affirm is building a security-focused AppSec team and seeks an early-career Application Security Engineer. You will help assess risks, support vulnerability management, and contribute lightweight tooling while collaborating with product and engineering to launch secure features.

This role emphasizes hands-on code work, understanding system designs, and communicating risk clearly to diverse audiences. Remote-first with US-wide opportunities.