Senior Product Security Engineer

Affirm as a Senior Product Security Engineer, where you will work closely with product and engineering teams to enhance the security of our products.

Responsibilities

• You will conduct threat modeling, architecture reviews, and source code analysis to identify vulnerabilities and provide recommendations for secure implementation.
• Additionally, you will assist product teams in developing security-focused test cases and advise on business security requirements early in the product development lifecycle.
• This is a remote-first position with a range of benefits, including generous time off, health benefits, and parental leave.
• Collaborer avec les équipes produit pour intégrer la sécurité à chaque phase du cycle de développement.
• Effectuer des modélisations de menaces et des examens d'architecture pour identifier et atténuer les menaces.
• Analyser le code source du produit pour identifier les vulnérabilités de sécurité et fournir des recommandations.
• Deep understanding of web application architecture and design principles

Requirements

• BS degree in related field or equivalent experience
• Understanding of continuous integration / continuous deployment processes and tools

Experience with PCI or other regulated environments

• Experience with Python, Kotlin, Java, AWS, and Azure is preferred
• Knowledge of common security flaws and resolution as published by OWASP, SANS, etc
• Experience with standard authentication mechanisms, including SAML and OAuth2
• Experience using modern software development and delivery techniques to develop cloud-based services

Preferred

• Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies
• MS degree in a related field or equivalent experience is a plus

Pay

USD 173,000 - 255,000