Senior Product Security Engineer - Remote, Equity & PTO

Affirm, Inc.; St. Louis (MO); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Spending stipends for tech setup and健康

Job summary

Affirm, Inc. is a remote-first company focused on secure, transparent financial products.

The Senior Product Security Engineer collaborates with product and engineering teams to embed security in every phase of development, from design through deployment, and to identify and mitigate risks in a fast-paced cloud environment. The role emphasizes threat modeling, secure coding practices, and collaboration with cross-functional teams to build secure, scalable services while complying with industry

Qualifications

• Experience designing secure software in web-based environments.
• Knowledge of PCI or other regulated environments.
• Ability to conduct threat modeling for complex products.
• Experience with SAML and OAuth2 authentication.
• Familiarity with CI/CD and modern delivery practices.

Responsibilities

• Partner with product teams to embed security in the product life cycle.
• Conduct threat modeling and architecture reviews.
• Review source code to identify vulnerabilities and provide secure implementation recommendations.
• Seek opportunities to automate security processes where feasible.
• Identify emerging classes of vulnerabilities and develop proactive solutions.
• Assist product teams in developing security-focused test cases.
• Advise product teams on business security requirements early in the product lifecycle.
• Decompose large, cross-team projects into tasks and drive to closure.

Skills

Web security

Threat modeling

Secure coding

OWASP knowledge

PCI experience

SAML/OAuth2

CI/CD processes

Cloud platforms

Education

BS in related field

MS degree preferred

Tools

CI/CD tools

AWS/Azure

SAML

Job description

Affirm, Inc. is a remote-first company focused on secure, transparent financial products.

The Senior Product Security Engineer collaborates with product and engineering teams to embed security in every phase of development, from design through deployment, and to identify and mitigate risks in a fast-paced cloud environment. The role emphasizes threat modeling, secure coding practices, and collaboration with cross-functional teams to build secure, scalable services while complying with industry