Senior Product Security Engineer - Remote-First

Affirm, Inc.; Washington (District of Columbia); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Monthly stipends for tech setup

Flexible time off and generous holiday

Employee stock purchase plan

Job summary

Affirm, Inc. is hiring a Senior Product Security Engineer to collaborate with product and engineering teams, shaping security across the product lifecycle. You will model threats, review code, and drive secure implementations while seeking automation opportunities.

The role emphasizes secure design, adherence to industry standards, and partnerships across cross-functional teams. Remote-friendly with competitive compensation and comprehensive benefits.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience with cloud-based services and modern delivery techniques (Python, Kotlin, Java, AWS, Azure).
• Knowledge of OWASP, SANS and other security guidance.
• Experience in PCI or other regulated environments.
• Experience with threat modeling for complex distributed products.
• Familiarity with SAML/OAuth2 authentication and CI/CD practices.
• BS or MS degree in a related field; advanced degrees a plus.

Responsibilities

• Partner with product teams to integrate security across the development lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate risks.
• Review product source code to find vulnerabilities and suggest secure implementations.
• Automate security processes where feasible.
• Identify emerging vulnerabilities and develop proactive solutions.
• Help create security-focused test cases and enforce security requirements.
• Advise product teams on business security needs early in development.
• Break down large projects, manage scope, and drive to closure.

Skills

Web app architecture

Threat modeling

Secure coding

Code review

CI/CD

OAuth2 / SAML

Cloud platforms

Python/Java/Kotlin

Education

BS degree in related field

MS degree in related field

Tools

AWS

Azure

Python

Java

Job description

Affirm, Inc. is hiring a Senior Product Security Engineer to collaborate with product and engineering teams, shaping security across the product lifecycle. You will model threats, review code, and drive secure implementations while seeking automation opportunities.

The role emphasizes secure design, adherence to industry standards, and partnerships across cross-functional teams. Remote-friendly with competitive compensation and comprehensive benefits.