Senior Product Security Engineer — Remote-First

Affirm, Inc.; Phoenix (AZ); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage for dependents

Tech setup stipends

Flexible time off

Employee stock purchase plan (ESPP)

Job summary

Affirm, Inc. is hiring a Senior Product Security Engineer to partner with product teams and embed security across the development lifecycle. You will conduct threat modeling, review code for vulnerabilities, and drive secure implementations while advocating security as a core part of product design.

You will work in a remote-first environment with flexible in-person onboarding; strong collaboration with engineering and product teams is essential to protect our payments platform and customers.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience with cloud-based services (Python, Kotlin, Java, AWS, and Azure).
• Knowledge of OWASP and common security flaws and mitigations.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex distributed products.

Responsibilities

• Partner with product teams to ensure security is included in the development lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review and analyze product code to identify vulnerabilities and provide secure implementations.
• Automate security processes where possible.
• Advise teams on business security requirements early in development.

Skills

Python

Kotlin

Java

AWS

Azure

Threat modeling

OWASP

PCI compliance

SAML/OAuth2

CI/CD

Web security

Education

BS degree in related field

MS degree in related field

Job description

Affirm, Inc. is hiring a Senior Product Security Engineer to partner with product teams and embed security across the development lifecycle. You will conduct threat modeling, review code for vulnerabilities, and drive secure implementations while advocating security as a core part of product design.

You will work in a remote-first environment with flexible in-person onboarding; strong collaboration with engineering and product teams is essential to protect our payments platform and customers.