Senior Product Security Engineer — Remote-First & Threat Modeling

Affirm, Inc.; Dallas (TX); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage

Tech stipend

Time off

ESPP

Remote-first

Job summary

Affirm is a remote-first company redefining payments with a security-first mindset. We seek a Senior Product Security Engineer to collaborate with product and engineering teams, shaping security in every phase from design to deployment.

You will influence architecture, review code, and help automate security processes while staying ahead of emerging threats. A strong background in web apps, cloud services, and regulated environments is essential.

Qualifications

• Deep understanding of web app architecture and design principles.
• Experience building cloud-based services with modern development/delivery techniques.
• Knowledge of OWASP/SANS security guidelines.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex products.
• Experience with SAML and OAuth2 authentication.
• Understanding of CI/CD processes and tools.
• BS/MS degree in a related field or equivalent experience.

Responsibilities

• Partner with product teams to ensure security in every phase of the product development lifecycle.
• Conduct threat modeling and architecture reviews to identify threats and mitigations.
• Review and analyze product source code to identify security vulnerabilities and provide secure implementation recommendations.
• Seek opportunities to automate security processes.
• Identify emerging vulnerability classes and develop proactive solutions.
• Help product teams develop security-focused test cases to enforce requirements.
• Advise on business security requirements early in development lifecycles.
• Decompose large cross-team projects into tasks and drive to closure.

Skills

Threat modeling

Web app security

CI/CD security

SAML & OAuth2

PCI compliance

Security architecture

Cloud security

Code review for security

Education

BS degree in related field

MS degree in related field

Tools

Python

Kotlin

Java

AWS

Azure

Job description

Affirm is a remote-first company redefining payments with a security-first mindset. We seek a Senior Product Security Engineer to collaborate with product and engineering teams, shaping security in every phase from design to deployment.

You will influence architecture, review code, and help automate security processes while staying ahead of emerging threats. A strong background in web apps, cloud services, and regulated environments is essential.