Senior Product Security Engineer
Affirm · Remote US
About the role
A senior product security engineer on Affirm's information security team, working remotely with the company's product and engineering groups to make its consumer finance products secure. The engineer builds security into each stage of development: threat modelling and architecture reviews, source code review for vulnerabilities, security test cases, early advice on requirements, automation, and running cross-team security projects to completion.
The team looks for deep knowledge of web application architecture, experience building cloud services in Python, Kotlin or Java on AWS or Azure, command of OWASP and SANS flaw classes, threat modelling for distributed systems, SAML and OAuth2, CI/CD, and work in PCI or other regulated settings.