Remote Security Risk Engineer - TPRM & Automation

Socket.dev; United States; On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health coverage for dependents

Flexible Spending Wallets

Time off

Employee stock purchase plan

Job summary

Affirm is a remote-first company reinventing credit with security at the core. This role focuses on evaluating third-party risk and building scalable, code-defined workflows to replace manual GRC work.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to automate risk assessments and develop dashboards for clear visibility across the Security Risk Management program. The role requires Python proficiency, cloud security familiarity, and knowledge of NIST, ISO

Qualifications

• 3+ years of information security, risk management, or compliance experience.
• Familiar with agentic coding tools and Python scripting.
• Knowledge of cloud environments (AWS, GCP, Azure) and standard security frameworks.

Responsibilities

• Conduct third‑party security assessments and document risk findings.
• Build automation to reduce manual GRC workflows using Python and low‑code tools.
• Configure integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and actions.
• Develop dashboards and reporting to show third‑party risk posture.
• Contribute to process improvements and program documentation.

Skills

InfoSec experience

Agentic coding tools

Python scripting

Cloud security concepts

Effective communication

Education

BA/BS in a relevant field

Professional certification such as CISSP/CISM/CISA/CRISC

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is a remote-first company reinventing credit with security at the core. This role focuses on evaluating third-party risk and building scalable, code-defined workflows to replace manual GRC work.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to automate risk assessments and develop dashboards for clear visibility across the Security Risk Management program. The role requires Python proficiency, cloud security familiarity, and knowledge of NIST, ISO