Senior Product Security Engineer - Drive Security at Scale

Affirm, Inc.; Miami (FL); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

100% premiums health coverage

Tech setup stipends

Flexible time off

ESPP stock purchase plan

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to collaborate with product and engineering teams to strengthen security across Affirm’s products. You will influence requirements, design, and implementation with a security-first mindset.

The role focuses on threat modeling, architecture reviews, and secure software practices in a remote-friendly environment. A strong background in web architectures and cloud platforms (AWS/Azure) is essential.

Qualifications

• B.S. degree in a related field or equivalent experience.
• MS degree in a related field or equivalent experience is a plus.
• Experience with secure software development and product security.

Responsibilities

• Partner with product teams to include security in the SDLC.
• Conduct threat modeling and architecture reviews.
• Review code to identify vulnerabilities and provide secure implementations.
• Automate security processes where possible.
• Develop security test cases with product teams.
• Advise on business security requirements early in development.
• Decompose cross-team projects and drive to closure.

Skills

Web app security

Threat modeling

CI/CD

OAuth2/SAML

Cloud experience

Python

Java

Kotlin

AWS

Azure

OWASP

PCI compliance

Education

Bachelor's degree in a related field

MS degree in a related field

Tools

Git

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to collaborate with product and engineering teams to strengthen security across Affirm’s products. You will influence requirements, design, and implementation with a security-first mindset.

The role focuses on threat modeling, architecture reviews, and secure software practices in a remote-friendly environment. A strong background in web architectures and cloud platforms (AWS/Azure) is essential.