Senior Product Security Engineer

About this role

Help product and engineering teams build security into Affirm’s products throughout the development lifecycle. The role focuses on threat modeling, architecture and code reviews, security guidance, and automation.

About the company

Affirm offers buy now, pay later financing that lets consumers split purchases into transparent installment payments at checkout. It partners with merchants to provide flexible credit options without late fees.

Stack

What you'll do

• Partner with product teams to incorporate security throughout product development.
• Conduct threat modeling and architecture reviews, and track threat mitigations.
• Review source code and recommend secure implementations.
• Automate security processes and develop solutions for emerging vulnerabilities.
• Help teams create security-focused test cases and address business security requirements.
• Break cross-team projects into tasks and drive them to completion.

What we're looking for

• Deep understanding of web application architecture and design.
• Experience building and delivering cloud-based services using modern software practices.
• Knowledge of common security vulnerabilities and their remediation.
• Experience threat modeling complex, distributed products.
• Familiarity with authentication mechanisms such as SAML and OAuth2.
• Understanding of CI/CD processes and tools.
• Experience with PCI or other regulated environments.
• Bachelor’s degree in a related field or equivalent experience.

Nice to have

• Experience with Python, Kotlin, Java, AWS, or Azure.
• Master’s degree in a related field or equivalent experience.

Benefits

• 100% subsidized medical coverage for employees and dependents, plus dental and vision.
• Monthly tech, health, and wellness spending stipends.
• Flexible time off and generous holidays.
• Employee stock purchase plan with discounted shares.