Senior Product Security Engineer - Remote-First, Equity

Affirm, Inc.; Las Vegas (NV); Remote; USD 173,000 - 255,000; Full time

Benefits offered by this job

100% subsidized medical coverage for员工

ESPP stock purchase plan

Monthly health, wellness and tech stip

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to help build and secure our rapidly evolving financial products.

You will partner with product teams to integrate security across the development lifecycle, perform threat modeling, review code for vulnerabilities, and drive automation for security processes. Ideal candidates have strong web security knowledge, experience with cloud platforms (AWS/Azure), and familiarity with PCI or other regulated environments.

Qualifications

• BS degree in related field or equivalent experience.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
• Deep understanding of web application architecture and design principles.

Responsibilities

• Partner with affirm product teams to ensure that security is included in every phase of the product development lifecycle.
• Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated.
• Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation.
• Seek out opportunities to automate processes when appropriate.
• Identify emerging classes of vulnerabilities and developing solutions for them before they’re a problem.
• Assist product teams in the development of security focused test cases to enforce security requirements.
• Advise product teams on business security requirements early in the product development lifecycle.
• Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.

Skills

Threat modeling

Secure coding practices

Web app architecture

CI/CD processes

Authentication protocols (SAML, OAuth2

Cloud platforms (AWS, Azure)

OWASP / security best practices

Education

BS degree or equivalent

MS degree (preferred)

Tools

AWS

Azure

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to help build and secure our rapidly evolving financial products.

You will partner with product teams to integrate security across the development lifecycle, perform threat modeling, review code for vulnerabilities, and drive automation for security processes. Ideal candidates have strong web security knowledge, experience with cloud platforms (AWS/Azure), and familiarity with PCI or other regulated environments.