Remote AppSec Engineer II

Logoslabs; San Francisco (CA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health care coverage for you and your

Flexible Spending Wallets

Time off and holidays

Employee stock purchase plan (ESPP)

Job summary

Affirm is seeking an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code. You will assess application risks, support vulnerability management, and contribute lightweight tooling and automation to scale AppSec across Affirm.

You will partner with product and engineering teams, read code and configurations, and help translate findings into actionable mitigations while growing offensive and defensive security skills in a product context.

Qualifications

• Foundational programming ability in one or more languages (Python, JS/TS, Kotlin, etc).
• Comfort reading and reasoning about code in unfamiliar codebases.
• Experience with Git and GitHub workflows (pull requests, reviews, issues).
• Hands-on experience building, testing, or securing software.
• Ability to write clear scripts or small programs to automate tasks.

Responsibilities

• Identify application security risks with product and engineering teams.
• Read code, configuration, logs, and docs to locate security risks.
• Contribute small code changes, scripts, detections, or automation to improve workflows.
• Review code changes in GitHub and track remediation work.
• Evaluate vulnerabilities from testing, bug bounty, tooling, or pentests and prioritize fixes.

Skills

Python

JavaScript/TypeScript

Git/GitHub

Security tooling

Code review

Offensive security

Automations

Data flows

Education

Bachelor's degree in CS or related field

Tools

Burp Suite

Cloud platforms

Job description

Affirm is seeking an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code. You will assess application risks, support vulnerability management, and contribute lightweight tooling and automation to scale AppSec across Affirm.

You will partner with product and engineering teams, read code and configurations, and help translate findings into actionable mitigations while growing offensive and defensive security skills in a product context.