Affirm - Senior Product Security Engineer

• Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle. • Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated. • Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation. • Seek out opportunities to automate processes when appropriate. • Identify emerging classes of vulnerabilities and developing solutions for them before they’re a problem. • Assist product teams in the development of security focused test cases to enforce security requirements. • Advise product teams on business security requirements early in the product development lifecycle. • Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure. • What We Look For • What We Look For • Deep understanding of web application architecture and design principles • Experience using modern software development and delivery techniques to develop cloud-based services. Python, Kotlin, Java, AWS, and Azure experience preferred. • Knowledge of common security flaws and resolution as published by OWASP, SANS, etc. • Experience with PCI or other regulated environments. • Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies. • Experience with standard authentication mechanisms, including SAML and OAuth2. • Understanding of continuous integration / continuous deployment processes and tools. • BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus. • Base Pay Grade - NEquity Grade - 9 • Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) • USA base pay range (CA, WA, NY, NJ, CT) per year: $195,000 - $255,000 USD. USA base pay range (all other U.S. states) per year: $173,000 - $233,000 USD. • Remote-first with flexibility built inAffirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. • Remote-first with flexibility built in • Benefits designed for youOur benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: