Senior Product Security Engineer

About the Role

The Senior Product Security Engineer will have experience building and architecting software as part of a larger team. You will work effectively with product and engineering teams to evaluate and influence product requirements, design, and implementation to improve the security of Affirm’s products.

What You'll Do

• Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle.
• Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated.
• Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation.
• Seek out opportunities to automate processes when appropriate.
• Identify emerging classes of vulnerabilities and develop solutions for them before they become an issue.
• Assist product teams in the development of security-focused test cases to enforce security requirements.
• Advise product teams on business security requirements early in the product development lifecycle.
• Decompose large, cross-team projects into individual tasks, manage scope across teams, and drive toward project closure.

What We Look For

• Deep understanding of web application architecture and design principles.
• Experience using modern software development and delivery techniques to develop cloud-based services (Python, Kotlin, Java, AWS, and Azure experience preferred).
• Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
• Experience with standard authentication mechanisms, including SAML and OAuth2.
• Understanding of continuous integration / continuous deployment (CI/CD) processes and tools.
• BS degree in a related field or equivalent experience; MS degree in a related field or equivalent experience is a plus.