Skip to main content

Affirm

Product Security Engineer II

Remote US (Remote)midAdded today

About this role

Affirm is seeking an early-career Application Security Engineer to help identify and mitigate security risks across the platform. You'll partner with engineering teams on secure design, analyze code and vulnerabilities, and build automation to scale AppSec practices across the organization.

What you'll do

  • Review application code, pull requests, and system designs to identify security risks and frame them as business concerns
  • Assess vulnerabilities from testing, bug bounty programs, and security tooling; prioritize and guide remediation efforts
  • Write code, scripts, and automation to improve AppSec workflows and prevent recurring security issues
  • Collaborate in GitHub with engineering teams on code reviews and security improvements
  • Translate security findings into developer-facing guidance, checklists, and secure coding patterns
  • Communicate security risks and tradeoffs to both technical and non-technical stakeholders

What they're looking for

  • Application security and vulnerability management
  • Code review and reading unfamiliar codebases
  • Python, JavaScript/TypeScript, or similar programming languages
  • Git and GitHub workflows including pull requests and code review
  • OWASP Top 10 and common web/API/cloud security risks
  • Hands-on offensive security (Burp Suite, penetration testing, or CTFs)
  • Scripting and automation for security workflows
  • Clear communication of technical security concepts
Apply with Autofill

Opens the application — the Jobs AI extension fills it for you. Set up autofill

Opens the official application on the employer’s site. No login required.

Affirm

Affirm builds financial infrastructure and platforms that power point-of-sale lending, merchant operations, card issuance, and capital management at scale. The company is hiring backend engineers, AI solutions engineers, and infrastructure specialists to develop reliable, scalable systems for merchant platforms, payment processing, reliability monitoring, and capital orchestration.

Website
affirm.com
View all jobs at Affirm

Likely interview questions

  • Walk us through a time you reviewed code or a system design and identified a security vulnerability—how did you assess the risk and recommend mitigation?
  • Tell us about a script or tool you've built to solve a security or operational problem. What was the challenge and how did you approach it?
Unlock all 7 questions free — and practice them live →