Senior Product Security Engineer - Remote & High-Impact

Affirm, Inc.; New York (NY); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Remote-first compensation structure

Wallets for tech, food, lifestyle

Parental leave and wellbeing programs

Company-wide paid days off

Mental healthcare programs

Learning & Development programs

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to help secure our growing product ecosystem. You will collaborate with product and engineering teams to influence requirements, design, and secure implementation across the development lifecycle.

You will conduct threat modeling, architecture reviews, and code reviews to identify vulnerabilities and drive secure solutions, while helping automate security processes and advance the organization's security posture.

Qualifications

• BS degree in related field or equivalent experience.
• Experience with PCI or other regulated environments.
• Experience with Python, Kotlin, Java, AWS, and Azure is preferred.
• Knowledge of common security flaws and resolutions per OWASP/SANS.

Responsibilities

• Partner with product teams to ensure security in all phases of SDLC.
• Conduct threat modeling and architecture reviews for complex distributed products.
• Review product source code to identify security vulnerabilities and provide secure implementation recommendations.
• Automate security processes where possible.
• Advise product teams on business security requirements early in development lifecycle.
• Decompose large cross-team projects into tasks and drive to closure.

Skills

Threat modeling

Architecture reviews

Secure SDLC

CI/CD processes

Programming languages: Python, Kotlin,

Java

OWASP knowledge

SAML/OAuth2

Cloud: AWS/Azure

Education

BS degree in related field

MS degree a plus

Tools

AWS

Azure

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to help secure our growing product ecosystem. You will collaborate with product and engineering teams to influence requirements, design, and secure implementation across the development lifecycle.

You will conduct threat modeling, architecture reviews, and code reviews to identify vulnerabilities and drive secure solutions, while helping automate security processes and advance the organization's security posture.