Senior Product Security Engineer - Remote, Equity, Impact

Affirm, Inc.; United States; Remote; USD 173,000 - 255,000; Full time

Benefits offered by this job

Remote-first

Equity grant

Competitive benefits

Job summary

Affir seeks a Senior Product Security Engineer to partner with product and engineering teams, embedding security across the development lifecycle and conducting threat modeling, architecture reviews, and secure code reviews.

You will drive automation, identify emerging vulnerabilities, and advise on security requirements early in the product lifecycle. This remote-first role emphasizes strong collaboration with cross-functional teams and cloud-based services.

Qualifications

• Deep understanding of web application architecture and design.
• Experience with modern cloud services and languages (Python, Kotlin, Java) on AWS/Azure.
• Knowledge of security flaws per OWASP/SANS.
• Experience with PCI or regulated environments.
• Experience conducting threat models for complex products.
• Experience with SAML and OAuth2.
• Understanding of CI/CD processes.

Responsibilities

• Partner with product teams to embed security in the SDLC.
• Conduct threat modeling and architecture reviews.
• Review product source code for vulnerabilities and provide secure implementation recommendations.
• Automate security processes where appropriate.
• Identify emerging vulnerabilities and develop solutions.
• Help product teams develop security-focused test cases.

Skills

Threat modeling

Architecture reviews

Secure coding

Automation

Cross-functional collaboration

Project management

Education

BS degree in related field

MS degree in related field

Tools

Python

Kotlin

Java

AWS

Azure

CI/CD

Job description

Affir seeks a Senior Product Security Engineer to partner with product and engineering teams, embedding security across the development lifecycle and conducting threat modeling, architecture reviews, and secure code reviews.

You will drive automation, identify emerging vulnerabilities, and advise on security requirements early in the product lifecycle. This remote-first role emphasizes strong collaboration with cross-functional teams and cloud-based services.