Senior Product Security Engineer (Threat Modeling & Cloud)

Affirm, Inc.; Boulder (CO); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

100% subsidized medical coverage

ESPP (employee stock purchase plan)

Monthly health, wellness & tech stip'

Flexible time off

Generous holiday calendar

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to improve the security of affirm’s products.

You will lead threat modeling, architecture reviews, and secure coding practices across cloud-based services (Python, Kotlin, Java, AWS, Azure). Join a remote-first company with generous benefits and a strong focus on transparent pay and health coverage for you and your dependents.

Qualifications

• BS degree in a related field or equivalent experience.
• MS degree is a plus.
• Experience with threat modeling and secure software design.
• Knowledge of PCI or other regulated environments.
• Familiarity with SAML/OAuth2 and cloud services.

Responsibilities

• Partner with product teams to embed security throughout the development lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate risks.
• Review code to find vulnerabilities and recommend secure implementations.
• Automate security processes and respond to emerging threats.
• Help teams develop security-focused test cases and enforce requirements.
• Advise on business security requirements early in product lifecycles.
• Break down large projects into tasks and drive cross-team delivery.

Skills

Threat modeling

Web security

Python

Java

Kotlin

AWS

Azure

Education

BS degree in related field

MS degree in related field

Tools

CI/CD tooling

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to improve the security of affirm’s products.

You will lead threat modeling, architecture reviews, and secure coding practices across cloud-based services (Python, Kotlin, Java, AWS, Azure). Join a remote-first company with generous benefits and a strong focus on transparent pay and health coverage for you and your dependents.