Senior Product Security Engineer - Remote

Affirm, Inc.; San Francisco (CA); Remote; USD 195,000 - 255,000; Full time

Benefits offered by this job

Health coverage for employees and-depd

Monthly tech and wellness stipends

Flexible time off

ESPP stock purchase plan

Job summary

Affirm, Inc. is hiring a Senior Product Security Engineer to partner with product teams, perform threat modeling, code review, and secure design decisions across the SDLC. The role emphasizes automation, proactive vulnerability handling, and security-focused testing in cloud-based services.

The candidate will work with Python, Kotlin, Java, AWS, and Azure within a remote-first environment, with some in-person collaboration as needed. A BS or MS in a related field is expected.

Qualifications

• BS degree or equivalent experience in a related field; MS preferred.
• Experience with threat modeling for distributed products using standard methods.
• Strong understanding of web app architecture and security patterns.
• Familiarity with PCI or other regulated environments.
• Knowledge of authentication mechanisms including SAML and OAuth2.
• Experience with CI/CD processes and tooling.
• Ability to work with product and engineering teams early in development cycles.

Responsibilities

• Partner with product teams to include security in every phase of development lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review and analyze product source code to identify vulnerabilities and provide secure implementations.
• Seek opportunities to automate security processes.
• Identify emerging vulnerabilities and develop proactive solutions.
• Develop security-focused test cases with product teams to enforce requirements.
• Advise on business security requirements early in development lifecycle.
• Decompose large cross-team projects into tasks and drive toward closure.

Skills

Web security

Threat modeling

Code review

Automation

Security requirements

Cross-team coordination

Education

BS degree in related field

MS degree in related field

Tools

Python

Kotlin

Java

AWS

Azure

SAML/OAuth2

Job description

Affirm, Inc. is hiring a Senior Product Security Engineer to partner with product teams, perform threat modeling, code review, and secure design decisions across the SDLC. The role emphasizes automation, proactive vulnerability handling, and security-focused testing in cloud-based services.

The candidate will work with Python, Kotlin, Java, AWS, and Azure within a remote-first environment, with some in-person collaboration as needed. A BS or MS in a related field is expected.