Staff Platform Security Engineer

Affirm; Myrtle Point (OR); Remote; USD 200,000 - 250,000; Full time

Job summary

A leading fintech company is seeking a Staff Security Engineer to drive initiatives in infrastructure and network security. This role requires hands-on experience in cloud services and Kubernetes, with a focus on managing security risks. The position offers a competitive salary range of $200,000 - $250,000 depending on location, and comes with extensive benefits including health coverage and flexible spending accounts.

Benefits

Health care coverage

Flexible Spending Wallets

Competitive vacation and holiday schedules

Employee stock purchase plan

Qualifications

• Extensive experience developing tooling and infrastructure for security.
• Proven track record in managing security risks in a cloud environment.
• Strong understanding of auditing methods for AWS cloud services.

Responsibilities

• Drive security initiatives for enhancing infrastructure and network security.
• Advocate for security practices across various engineering teams.
• Develop and implement scalable security solutions.

Skills

Infrastructure operations

Security risk management

Cloud services development

Kubernetes deployment

Security tooling management

Education

BS degree in related field

MS degree in related field

Tools

Terraform

Wiz

Crowdstrike Falcon EDR

AWS System Manager Agent

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

Affirm values information security as a critical part of the company’s continued success. Our mission is to make information security programmatic and cultural in affirm, enabling the company to succeed in building honest financial products.

The Security team posture increases security and reduces risk while securely enabling access to information for those who need it! The ideal employee will have extensive experience developing tooling and infrastructure used for securing technical resources as part of a larger team. The candidate will quickly come up to speed with current systems and processes, identify and develop improvements, and implement solutions used by experienced software and infrastructure engineers across the organization.

We protect and secure affirm’s production infrastructure while balancing risk to enable business growth.

We are looking for a Staff Security Engineer in the Security Engineering and Architecture organization, primarily supporting the Infrastructure and Platform Security team focusing on vulnerability management, cloud security, perimeter and network security, and hardening of critical environments. We work closely with corporate/workforce security, incident response, security operations, identity and access systems and partner with infrastructure engineering teams that build, operate and manage compute, storage, caching and security systems at scale. You will partner with the right teams to solve complex security problems and help design solutions that are aligned with broader organizational goals.

What you’ll do

• Drive infrastructure, network and perimeter security initiatives for hardening and segmentation.
• Work across multiple engineering functions and organizations to advocate for security practices.
• Influence, align and implement security features across engineering teams.
• Demonstrate expertise across various domains to design and develop scalable solutions.
• Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection.
• Specify, standardize, configure, and validate access controls across a wide range of cloud services. Integrate security tooling into existing infrastructure.
• Develop security software configurations and improve tool functionality over time. Implement security controls across affirm’s data infrastructure, including S3, DynamoDB, RDS, and Snowflake.
• Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.

What we look for

• A proven track record of tackling difficult and ambiguous challenges and driving them to success.
• Capable of shifting focus in a complex, ever changing environment to balance between security risks and business agility.
• Strong in multiple domains including infrastructure operations (e.g. networking, systems, storage), Corporate IT, able to make technical trade-offs between short versus long term security business decisions.
• Hands‑on experience deploying infrastructure within a Kubernetes environment.
• Experience developing and deploying cloud services using Terraform.
• Understanding of methods and systems used for auditing usage and access to AWS cloud services.
• Experience managing security tooling, including Wiz, Auditbeat, Crowdstrike Falcon EDR, AWS System Manager Agent, or similar.
• BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.

Base Pay Grade - P

Equity Grade - 13

Employees new to affirm typically come in at the start of the pay range. affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job‑related skills.

Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)

USA base pay range (CA, WA, NY, NJ, CT) per year: $225,000 - $275,000

USA base pay range (all other U.S. states) per year: $200,000 - $250,000

Location: Remote - US

#LI-Remote

Affirm is proud to be a remote‑first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned affirm office. A limited number of roles remain office‑based due to the nature of their job responsibilities.

We’re extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:

• Health care coverage - affirm covers all premiums for all levels of coverage for you and your dependents
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of affirm at a discount

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, affirm will consider for employment qualified applicants with arrest and conviction records.

By clicking "Submit Application," you acknowledge that you have read affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.