Remote Product Security Engineer II

Affirm; Philadelphia (Philadelphia County); Remote; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

Job summary

Affirm is reinventing credit to make it more honest and friendly, and is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code, and who wants to help assess risks, support vulnerability management, and contribute lightweight tooling.

You will work with product and engineering teams, review code in GitHub, translate findings into practical mitigations, and grow hands-on offensive and defensive security skills in a remote-first environment.

Qualifications

• 0–2+ years of experience in application security or related fields.
• Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
• Comfort reading, navigating, and reasoning about code, even in unfamiliar codebases.

Responsibilities

• Partner with product and engineering teams to identify application security risks and frame them as clear business risks and next steps.
• Read application code, configuration, and logs to understand system security risks.
• Contribute small code changes, scripts, or automation to improve AppSec workflows.

Skills

Python

JavaScript/TypeScript

GitHub

Code review

Security tooling

Offensive security

Automations

Threat modeling

Risk analysis

Tools

GitHub

Burp Suite

Python

Job description

Affirm is reinventing credit to make it more honest and friendly, and is seeking an early-career Application Security Engineer who enjoys reading and reasoning about code, and who wants to help assess risks, support vulnerability management, and contribute lightweight tooling.

You will work with product and engineering teams, review code in GitHub, translate findings into practical mitigations, and grow hands-on offensive and defensive security skills in a remote-first environment.