Remote Senior Product Security Engineer — Secure by Design

Affirm, Inc.; Seattle (WA); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage for employees and/depd

Monthly tech stipends

Flexible time off

Employee stock purchase plan (ESPP)

Job summary

Affirm is seeking a Senior Product Security Engineer to drive security across the product lifecycle in collaboration with product and engineering teams. The role focuses on threat modeling, architecture reviews, and secure code analysis to improve Affirm’s products.

The position emphasizes automating security processes, identifying new vulnerabilities, and advising on security requirements early in development, in a remote-first environment with strong compensation and benefits.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience with modern software development and delivery techniques for cloud-based services.
• Knowledge of common security flaws and resolutions (OWASP, SANS).
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex distributed products.
• Experience with SAML and OAuth2 authentication mechanisms.
• Understanding of CI/CD processes and tools.

Responsibilities

• Partner with product teams to embed security in the product lifecycle.
• Conduct threat modeling and architecture reviews to identify threats and mitigations.
• Review source code to identify security vulnerabilities and provide secure implementation recommendations.
• Automate security processes where appropriate.
• Identify emerging classes of vulnerabilities and develop solutions preemptively.
• Assist product teams in developing security-focused test cases.
• Advise on business security requirements early in development.
• Break down large cross-team projects into tasks and drive to closure.

Skills

Threat modeling

Cloud security

OWASP knowledge

PCI experience

SAML/OAuth2

CI/CD

BS in related field

MS a plus

Education

BS degree in related field

MS degree in related field

Tools

Python

Kotlin

Java

AWS

Azure

Job description

Affirm is seeking a Senior Product Security Engineer to drive security across the product lifecycle in collaboration with product and engineering teams. The role focuses on threat modeling, architecture reviews, and secure code analysis to improve Affirm’s products.

The position emphasizes automating security processes, identifying new vulnerabilities, and advising on security requirements early in development, in a remote-first environment with strong compensation and benefits.