Senior Product Security Engineer - Remote-First & Impactful

Affirm, Inc.; Salt Lake City (UT); Remote; USD 173,000 - 255,000; Full time

Benefits offered by this job

Health coverage at no cost

Spending stipends for tech setup and健康

Time off and holiday calendar

Employee stock purchase plan

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to embed security throughout the development lifecycle and drive secure design and implementation across our cloud-based services.

You will review architectures, assess threats, and guide secure coding practices while staying ahead of emerging vulnerabilities. This role supports a remote-first environment with competitive compensation and comprehensive benefits.

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience with modern software development and delivery techniques for cloud-based services.
• Familiarity with PCI or other regulated environments.
• Experience conducting threat models for complex distributed products.

Responsibilities

• Partner with product teams to embed security in the product lifecycle.
• Conduct threat modeling and architecture reviews to identify mitigations.
• Review product source code to find vulnerabilities and propose fixes.
• Automate security processes where possible.
• Identify new vulnerability classes and develop preventive solutions.
• Help develop security-focused test cases to enforce requirements.
• Advise teams on security requirements early in development lifecycle.
• Decompose large projects into tasks and drive cross-team delivery.

Skills

Web architecture

Threat modeling

Security requirements

CI/CD security

Authentication (SAML/OAuth)

Education

BS or higher in related field or equivalent

Tools

Python

Kotlin

Java

AWS

Azure

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to embed security throughout the development lifecycle and drive secure design and implementation across our cloud-based services.

You will review architectures, assess threats, and guide secure coding practices while staying ahead of emerging vulnerabilities. This role supports a remote-first environment with competitive compensation and comprehensive benefits.