Remote Product Security Engineer II - Build Trust

Affirm; Miami (FL); On-site; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

ESPP

Time off

Flexible Spending Wallets

Job summary

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

The Application Security team partners with product, engineering, and risk teams to identify security risks early, recommend pragmatic mitigations, and help teams launch securely. This early-career role focuses on reading code, building lightweight tooling, and contributing to secure design decisions.

Qualifications

• 0–2+ years of experience in application security, software engineering, or related fields.
• Foundational programming ability in one or more languages such as Python or JavaScript/TypeScript.
• Comfort reading and reasoning about code, even in unfamiliar codebases.
• Experience with Git and GitHub workflows, including PRs and code review.

Responsibilities

• Identify application security risks with product and engineering teams and frame them as business risks with next steps.
• Read application code, configuration, PRs, logs, and docs to understand systems and risks.
• Contribute small code changes, scripts, detections, or automation to improve AppSec workflows.
• Review code changes in GitHub and track remediation work with engineers.
• Evaluate vulnerabilities from testing, bug bounties, tooling, and penetration tests; prioritize remediation.

Skills

Python/JavaScript

Git/GitHub

Code reading

Vulnerability management

Security tooling

Offensive security

Risk assessment

Communication skills

Tools

Burp Suite

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

The Application Security team partners with product, engineering, and risk teams to identify security risks early, recommend pragmatic mitigations, and help teams launch securely. This early-career role focuses on reading code, building lightweight tooling, and contributing to secure design decisions.