Senior Product Security Engineer (Remote-First • Equity + ESPP)

Affirm, Inc.; Palo Alto (CA); Remote; USD 195,000 - 255,000; Full time

Benefits offered by this job

Health coverage for you and dependents

ESPP equity program

Tech stipends

Generous time off and holidays

Job summary

Affirm is hiring a Senior Product Security Engineer to partner with product teams, model threats, review code, and automate security where possible. You will influence architecture, security requirements, and rapid remediation across cloud-based services in Python, Java, and more.

This role supports a remote-first culture with flexible in-person onboarding where needed. The ideal candidate has strong threat modeling skills, PCI exposure, and experience with SAML/OAuth2, CI/CD, and modern

Qualifications

• Deep understanding of web application architecture and design principles.
• Experience with cloud-based services using Python, Kotlin, Java, AWS, and Azure.
• Knowledge of OWASP/SANS security recommendations.
• Experience with PCI or other regulated environments.
• Ability to conduct threat modeling for complex distributed products.
• Experience with SAML and OAuth2 authentication mechanisms.
• CI/CD processes and tooling familiarity.
• BS degree in a related field; MS is a plus.

Responsibilities

• Partner with product teams to embed security across the product development lifecycle.
• Perform threat modeling and architecture reviews to identify mitigations.
• Review source code and suggest secure implementation improvements.
• Identify opportunities to automate security processes.
• Track emerging vulnerability classes and propose solutions.
• Help develop security-focused test cases for product requirements.
• Advise teams on security requirements early in development.
• Break down multi-team projects into actionable tasks and drive to closure.

Skills

Web app architecture

Cloud services

OWASP / secure coding

PCI compliance

Threat modeling

SAML / OAuth2

CI / CD familiarity

Education

BS degree in related field

MS degree a plus

Job description

Affirm is hiring a Senior Product Security Engineer to partner with product teams, model threats, review code, and automate security where possible. You will influence architecture, security requirements, and rapid remediation across cloud-based services in Python, Java, and more.

This role supports a remote-first culture with flexible in-person onboarding where needed. The ideal candidate has strong threat modeling skills, PCI exposure, and experience with SAML/OAuth2, CI/CD, and modern