Senior Product Security Engineer

Affirm

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$195,000–$255,000 / yr
Posted
8 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $189k
This role $225k
$136k $268k
below market most similar roles pay here above market

This role pays more than 77% of similar roles. Most pay $158,550–$220,000 — the blue band above. At the midpoint, this role pays about $225k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Affirm

Affirm is a buy-now, pay-later (BNPL) financial technology company that offers point-of-sale installment loans to consumers, allowing them to split purchases into fixed monthly payments with transparent terms. Industry: Financial Technology & Consumer Lending

Affirm currently has 66 open roles on FindRole.

Listed pay typically runs $195,000–$255,000 across 59 roles with salary data.

Most-posted roles

View all roles at Affirm

At a glance

TL;DR · Senior Product Security Engineer

The Senior Product Security Engineer joins the Security team to integrate security into every phase of the product development lifecycle. This role involves partnering with product and engineering teams to evaluate requirements, conduct threat modeling, and perform architecture reviews for complex, distributed products. Day-to-day responsibilities include analyzing product source code to identify vulnerabilities, developing security-focused test cases, and decomposing large projects into manageable tasks. The candidate must possess a deep understanding of web application architecture, common security flaws from OWASP or SANS, and experience in regulated environments like PCI. Technical requirements include proficiency with Python, Kotlin, Java, AWS, and Azure, alongside knowledge of SAML, OAuth2, and CI/CD processes. The role focuses on mitigating risks and securing honest financial products through proactive threat identification.

What you'll do

  • Partner with product teams to integrate security into every phase of the product development lifecycle.
  • Conduct threat modeling and architecture reviews to identify, document, and mitigate potential threats.
  • Review and analyze product source code to identify vulnerabilities and provide secure implementation recommendations.
  • Identify emerging classes of vulnerabilities and develop proactive solutions to prevent security issues.
  • Assist product teams in developing security-focused test cases to enforce specific security requirements.
  • Advise product teams on business security requirements early in the product development lifecycle.
  • Decompose large projects into individual tasks and manage scope across teams to drive project closure.
  • Seek out and implement opportunities to automate security processes.

What we're looking for

  • BS degree in a related field or equivalent experience.
  • MS degree in a related field or equivalent experience (preferred).
  • Deep understanding of web application architecture and design principles.
  • Experience using modern software development and delivery techniques to develop cloud-based services.
  • Python, Kotlin, Java, AWS, and Azure experience (preferred).
  • Knowledge of common security flaws and resolution as published by OWASP or SANS.
  • Experience with PCI or other regulated environments.
  • Experience conducting threat models for complex, distributed products using standard methodologies.
  • Experience with standard authentication mechanisms, including SAML and OAuth2.
  • Understanding of continuous integration/continuous deployment processes and tools.

More like this

Similar roles

Senior Product Security Engineer

Adobe

San Jose, CA 47 days ago $144,800–$261,450
Application Security OWASP Top 10 Python Burp Suite PowerBI JIRA AWS Lambda API Gateway REST API OAuth2 SQL Injection XSS SSRF IDOR CVSS v3.1 SOAR Penetration Testing curl
5+ yrs exp

Senior Product Security Engineer

PayPal

Austin, TX +1 55 days ago $130,500–$193,600
Python Go Bash Java Javascript Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps
3+ yrs exp Hybrid

Senior Product Security Engineer

PayPal

Austin, TX +1 55 days ago $130,500–$193,600
Python Go Java Javascript Bash Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps Telemetry Metrics
3+ yrs exp Hybrid

Senior Product Security Engineer

Adobe

San Jose, CA +3 47 days ago
Python OWASP Top 10 AI Prompt Engineering API Orchestration Application Security Vulnerability Management Root-Cause Analysis Automation Playbooks
3+ yrs exp

Staff CIAM Software Engineer

Affirm

Remote 84 days ago $230,000–$290,000
Python Kotlin AWS Kubernetes MySQL Spark OAuth 2.0 OIDC SAML SCIM Terraform CI/CD Infrastructure as Code Buildkite GitHub Okta Auth0 Ping Identity ForgeRock Azure AD B2C
7+ yrs exp Remote

Senior Product Security Engineer

Plaid

Seattle, WA +2 20 days ago $190,000–$262,800
Application Security Threat Modeling Security Architecture Authentication Authorization Vulnerability Management Penetration Testing Security Automation Distributed Systems Sensitive Data Protection Secure Design Patterns
5+ yrs exp