Senior Product Security Engineer - Remote, Equity & ESPP

Affirm, Inc.; San Francisco (CA); Remote; USD 195,000 - 255,000; Full time

Benefits offered by this job

100% subsidized medical coverage

Monthly health/tech stipends

Flexible time off

Employee stock purchase plan

Job summary

Affirm, Inc. is hiring a Senior Product Security Engineer to help secure our products from design through deployment.

You will partner with product and engineering teams to embed security across the development lifecycle, conduct threat modeling, review code for vulnerabilities, and drive secure-by-design initiatives. The role emphasizes threat modeling, architectural reviews, and collaboration across cross-functional teams.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience using modern software development and delivery techniques to develop cloud-based services.
• Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
• Experience with standard authentication mechanisms, including SAML and OAuth2.
• Understanding of CI/CD processes and tools.
• BS degree in related field; MS degree a plus.

Responsibilities

• Partner with product teams to include security in every phase of the product lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review and analyze product source code for vulnerabilities and provide secure implementation recommendations.
• Automate processes where appropriate and identify new vulnerability classes to preempt issues.
• Assist product teams in developing security-focused test cases.
• Advise product teams on security requirements early in development lifecycle.
• Decompose large cross-team projects into tasks and drive to closure.

Education

BS degree in related field

MS degree in related field (plus)

Tools

Python

Kotlin

Java

AWS

Azure

Job description

Affirm, Inc. is hiring a Senior Product Security Engineer to help secure our products from design through deployment.

You will partner with product and engineering teams to embed security across the development lifecycle, conduct threat modeling, review code for vulnerabilities, and drive secure-by-design initiatives. The role emphasizes threat modeling, architectural reviews, and collaboration across cross-functional teams.