Senior Product Security Engineer - Remote-First

Affirm, Inc.; Philadelphia (Philadelphia County); Remote; USD 173,000 - 255,000; Full time

Benefits offered by this job

100% subsidized medical, dental and

Monthly stipends for tech setup

Flexible time off

Employee stock purchase plan (ESPP)

Job summary

Affirm, Inc. seeks a Senior Product Security Engineer to integrate security across the product development lifecycle. You will partner with product and engineering teams to assess requirements, design secure solutions, and implement protections for our financial products.

The role emphasizes threat modeling, secure coding reviews, and automating security processes. A strong background in web security, cloud services, and modern DevOps is essential.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience using modern software development and delivery techniques to develop cloud-based services (Python, Kotlin, Java, AWS, Azure).
• Knowledge of OWASP and other security guidelines.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex distributed products.
• Experience with SAML and OAuth2 authentication mechanisms.
• Understanding of CI/CD processes and tools.
• BS degree in related field or equivalent experience; MS degree is a plus.

Responsibilities

• Partner with product teams to include security in the product development lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review and analyze source code to identify security vulnerabilities and recommend secure implementations.
• Seek opportunities to automate security processes where appropriate.
• Identify emerging vulnerabilities and develop proactive solutions.
• Assist product teams in developing security-focused test cases.
• Advise product teams on business security requirements early in development lifecycle.
• Decompose large cross-team projects into tasks and drive toward closure.

Skills

Web security concepts

Threat modeling

Cloud services

CI/CD practices

Secure coding

Education

BS in related field or equivalent experience

MS in related field or equivalent experience

Tools

Python

Kotlin

Java

AWS

Azure

SAML

OAuth2

CI/CD tools

Job description

Affirm, Inc. seeks a Senior Product Security Engineer to integrate security across the product development lifecycle. You will partner with product and engineering teams to assess requirements, design secure solutions, and implement protections for our financial products.

The role emphasizes threat modeling, secure coding reviews, and automating security processes. A strong background in web security, cloud services, and modern DevOps is essential.