Senior Product Security Engineer — Threat Modeling & Secure SDLC

Affirm, Inc.; Detroit (MI); Remote; USD 173,000 - 233,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Tech setup stipends

Employee stock purchase plan (ESPP)

Flexible time off

Job summary

Affirm, Inc. seeks a Senior Product Security Engineer to partner with product and engineering teams to integrate security across the development lifecycle. You will conduct threat modeling, review code for vulnerabilities, and help automate security processes to protect affirm’s financial products.

The role requires deep knowledge of web application security, CI/CD, and security architectures. Affirm emphasizes a remote-first environment with flexible in-person options and competitive base pay

Qualifications

• BS degree in related field or equivalent experience.
• Experience conducting threat modeling for complex, distributed products.
• Experience reviewing product code to find security vulnerabilities.

Responsibilities

• Partner with product teams to integrate security throughout the lifecycle.
• Conduct threat modeling and architecture reviews to identify and mitigate threats.
• Review source code to identify vulnerabilities and provide secure implementation recommendations.
• Automate security processes where appropriate.
• Advise on business security requirements early in development lifecycle.
• Decompose large security projects into manageable tasks and drive to closure.

Skills

Threat modeling

Architecture reviews

Secure coding

Automation

CI/CD

Education

BS degree or equivalent

MS degree helpful

Tools

Python

Java

Kotlin

AWS

Azure

Job description

Affirm, Inc. seeks a Senior Product Security Engineer to partner with product and engineering teams to integrate security across the development lifecycle. You will conduct threat modeling, review code for vulnerabilities, and help automate security processes to protect affirm’s financial products.

The role requires deep knowledge of web application security, CI/CD, and security architectures. Affirm emphasizes a remote-first environment with flexible in-person options and competitive base pay