Remote-First Senior Product Security Engineer

Affirm, Inc.; San Diego (CA); Remote; USD 173,000 - 255,000; Full time

Benefits offered by this job

Health coverage for you and dependents

ESPP stock purchase plan

Tech stipend for setup and devices

Generous time off

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams, ensuring security is embedded in the product development lifecycle.

The role emphasizes threat modeling, architecture reviews, and secure coding practices to mitigate risks across cloud-based services (AWS/Azure). You'll work in a remote-first environment with generous pay ranges and benefits, including full health coverage and an ESPP.

Qualifications

• BS degree in a related field or equivalent experience.
• MS degree in related field or equivalent experience is a plus.
• Experience securing product development lifecycle and software architecture.

Responsibilities

• Partner with product teams to include security in all phases of development.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review product source code to find vulnerabilities and suggest secure implementations.
• Automate security processes where appropriate.
• Identify emerging vulnerability classes and develop proactive solutions.
• Help product teams develop security-focused test cases and requirements.
• Advise on business security requirements early in development.
• Break down large cross-team projects into manageable tasks and drive to closure.

Skills

Threat modeling

Architecture reviews

Secure coding

Cross-functional collaboration

CI/CD security

Cloud security (AWS/Azure)

Education

BS degree in related field

MS degree in related field (plus)

Tools

Python

Kotlin

Java

OWASP

SAML

OAuth2

CI/CD tooling

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams, ensuring security is embedded in the product development lifecycle.

The role emphasizes threat modeling, architecture reviews, and secure coding practices to mitigate risks across cloud-based services (AWS/Azure). You'll work in a remote-first environment with generous pay ranges and benefits, including full health coverage and an ESPP.