Senior Product Security Engineer - Threat Modeling

Affirm, Inc.; San Jose (CA); Remote; USD 195,000 - 255,000; Full time

Benefits offered by this job

100% premiums coverage

ESPP stock plan

Tech stipends

Flexible time off

Remote-friendly

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to collaborate with product and engineering teams to build secure, scalable financial software.

You will evaluate requirements, influence design, and implement security controls across cloud-based services using Python, Kotlin, Java, and modern CI/CD pipelines. The role emphasizes threat modeling, secure code review, and automating security processes while staying aligned with industry standards (OWASP, PCI).

Qualifications

• BS in a related field or equivalent experience.
• MS degree in a related field or equivalent experience is a plus.
• Strong background in security engineering and threat modeling.
• Experience with secure software development lifecycle and secure code review.
• Knowledge of PCI or other regulated environments.
• Familiarity with cloud platforms (AWS/Azure) and modern delivery pipelines.

Responsibilities

• Partner with product teams to ensure security is integrated in the product lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate risks.
• Review code to identify vulnerabilities and provide secure implementation recommendations.
• Automate security processes where appropriate.
• Identify emerging security vulnerabilities and develop proactive mitigations.
• Advise product teams on security requirements early in development.
• Decompose large projects into tasks and drive cross-team delivery to closure.

Skills

Threat modeling

Web security architecture

CI/CD processes

OAuth2 & SAML

OWASP knowledge

PCI compliance

Cloud services (AWS/Azure)

Programming: Python/Kotlin/Java

Education

BS in Computer Science or related field

MS degree in related field (preferred)

Tools

AWS

Azure

Python

Java

Kotlin

Jenkins

GitHub Actions

SAML 2.0

OAuth2

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to collaborate with product and engineering teams to build secure, scalable financial software.

You will evaluate requirements, influence design, and implement security controls across cloud-based services using Python, Kotlin, Java, and modern CI/CD pipelines. The role emphasizes threat modeling, secure code review, and automating security processes while staying aligned with industry standards (OWASP, PCI).