Senior Product Security Engineer

📋 Description

• Partner with Affirm product teams to ensure that security is included in every phase of the product
• Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and
• Review and analyze product source code to identify security vulnerabilities and provide
• Seek out opportunities to automate processes when appropriate.
• Identify emerging classes of vulnerabilities and developing solutions for them before they’re a
• Assist product teams in the development of security focused test cases to enforce security

🎯 Requirements

• Deep understanding of web application architecture and design principles
• Experience using modern software development and delivery techniques to develop cloud-based
• Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard threat
• Experience with standard authentication mechanisms, including SAML and OAuth2.

🎁 Benefits

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at