Senior Product Security Engineer

Affirm

. Partner with Affirm product teams to ensure security is included in every phase of the product development lifecycle .

Posted 10/27/2026full-timeRemote • United StatesSenior💰 $173,000 - $233,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in web application architecture, security vulnerability assessment, and threat modeling while collaborating with product teams to integrate security throughout the product development lifecycle. Proficient in automating security processes and developing security-focused test cases to ensure compliance with industry standards.

Highest-signal resume keywords

Web Application ArchitectureThreat ModelingPython ProgrammingAWS Cloud ServicesSecurity Vulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat Modeling TechniquesSecurity Flaw ResolutionCloud-Based Services DevelopmentContinuous IntegrationContinuous DeploymentJava ProgrammingKotlin ProgrammingSAML AuthenticationOAuth2 AuthenticationPCI Compliance

Soft Skills

Project ManagementCollaborationCommunication

Tools & Technologies

AWSAzure

Industry Keywords

OWASPSANSRegulated Environments

Tech Stack

Tools & technologies

AWSAzureCloudJavaKotlinPython

About the role

Key responsibilities & impact

Partner with Affirm product teams to ensure security is included in every phase of the product development lifecycle
Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated
Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation
Automate processes when appropriate
Identify emerging classes of vulnerabilities and develop solutions before they become problems
Assist product teams in developing security-focused test cases to enforce security requirements
Advise product teams on business security requirements early in the product development lifecycle
Decompose large, cross-team projects into individual tasks, manage scope across teams, and drive projects to closure

Requirements

What you’ll need

Deep understanding of web application architecture and design principles
Experience using modern software development and delivery techniques to develop cloud-based services
Python, Kotlin, Java, AWS, and Azure experience preferred
Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
Experience with PCI or other regulated environments
Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies
Experience with standard authentication mechanisms, including SAML and OAuth2
Understanding of continuous integration / continuous deployment processes and tools
BS degree in related field or equivalent experience
MS degree in a related field or equivalent experience is a plus

Benefits

Comp & perks

Equity rewards may be included in total compensation
Monthly stipends for health, wellness, and tech spending
100% subsidized medical coverage for employees and dependents
Dental and vision coverage for employees and dependents
Flexible time off
Generous holiday calendars
Employee stock purchase plan (ESPP) allowing employees to buy Affirm stock at a discount
Inclusive interview process and accommodations for candidates with disabilities
Remote-first flexibility
In-person onboarding experience for all new hires