Remote-First Product Security Engineer II

Affirm; Austin (TX); On-site; USD 146,000 - 206,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking an early-career Application Security Engineer to help assess risks, support vulnerability management, and contribute lightweight tooling and automation. You will work with product and engineering teams, read code and configurations, and help translate findings into actionable risk-based guidance.

The role emphasizes collaboration, practical security improvements, and learning across offensive, defensive, and software engineering disciplines in a remote-first environment.

Qualifications

• 0–2+ years of experience in application security or related fields.
• Foundational programming ability in Python, JavaScript/TypeScript, Kotlin.
• Comfort reading, navigating, and reasoning about code.
• Experience using Git and GitHub workflows.
• Hands-on experience building, testing, breaking, or securing software.

Responsibilities

• Identify application security risks and frame them as business risks with next steps.
• Read code, configs, PRs, logs to understand system security.
• Contribute small code changes, tests, or automation to improve workflows.
• Review code changes in GitHub and track remediation work.
• Evaluate vulnerabilities from various sources and prioritize fixes.

Skills

Python

JavaScript/TypeScript

Kotlin

Git / GitHub

Job description

Affirm is seeking an early-career Application Security Engineer to help assess risks, support vulnerability management, and contribute lightweight tooling and automation. You will work with product and engineering teams, read code and configurations, and help translate findings into actionable risk-based guidance.

The role emphasizes collaboration, practical security improvements, and learning across offensive, defensive, and software engineering disciplines in a remote-first environment.