Senior Product Security Engineer: Threat Modeling & Cloud

Affirm, Inc.; Raleigh (NC); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

100% premiums covered for employees &

Monthly stipends for tech setup and HW

Generous time off and holiday calendar

Employee stock purchase plan (ESPP)

Job summary

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to embed security throughout the product development lifecycle.

You will assess architecture, conduct threat modeling, review code for vulnerabilities, and help shape secure implementation across cloud-based services (Python, Kotlin, Java; AWS/Azure). The role emphasizes identifying and mitigating threats early, automating security processes, and advising on security requirements in a

Qualifications

• BS degree in a related field; MS degree is a plus.
• Deep understanding of web application architecture and design principles.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard methods.
• Familiarity with authentication mechanisms including SAML and OAuth2.
• Understanding of CI/CD processes and tools.

Responsibilities

• Partner with product teams to include security in every phase of the SDLC.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review and analyze product code to identify vulnerabilities and provide secure implementation guidance.
• Automate security processes where possible.
• Identify emerging vulnerabilities and develop proactive solutions.
• Help product teams develop security-focused test cases to enforce requirements.
• Advise on business security requirements early in development lifecycle.
• Break down large cross-team projects into tasks and drive to closure.

Skills

Web application security

Threat modeling

Code review

Python

AWS

Azure

OAuth2

SAML

PCI compliance

CI/CD

Education

BS in Computer Science or related field

MS in related field

Job description

Affirm, Inc. is seeking a Senior Product Security Engineer to partner with product and engineering teams to embed security throughout the product development lifecycle.

You will assess architecture, conduct threat modeling, review code for vulnerabilities, and help shape secure implementation across cloud-based services (Python, Kotlin, Java; AWS/Azure). The role emphasizes identifying and mitigating threats early, automating security processes, and advising on security requirements in a