Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Partner with product and engineering teams to identify application security risks and frame them as business risks with clear launch next steps. Review application code, pull requests, configuration, and logs to understand where vulnerabilities may exist. Contribute lightweight tooling, automation, detections, tests, and secure defaults to scale AppSec. Evaluate vulnerabilities from testing and bug bounty sources, run vulnerability management workflows, and communicate risk, tradeoffs, and mitigations to technical and non-technical audiences.

Location: Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and translate them into business risks with recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Work in GitHub to review code changes, participate in pull request discussions, and collaborate with engineers on remediation work.
•Evaluate vulnerabilities from internal testing and other sources, run vulnerability management workflows (triage to reporting), and communicate risk, tradeoffs, and mitigations.

Pay and Benefits

Salary: CAD 133,000 - 183,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEquity

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
•Comfort reading, navigating, and reasoning about code, including in unfamiliar codebases.
•Experience using Git and GitHub (or similar version-control workflows), including pull requests and code review.
•Foundational understanding of common web, API, mobile, cloud, and application security risks (e.g., OWASP Top 10, authentication/authorization, injection, secrets exposure).

Experience:0Application securityVulnerability managementOffensive securityPenetration testingSecurity operations

Skills:CommunicationCollaborationGrowth mindsetRisk reasoningProduct empathy

Languages:English

Tech Stack:PythonJavaScript/TypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10

Company Brief

Affirm

Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and translate them into business risks with recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Work in GitHub to review code changes, participate in pull request discussions, and collaborate with engineers on remediation work.
•Evaluate vulnerabilities from internal testing and other sources, run vulnerability management workflows (triage to reporting), and communicate risk, tradeoffs, and mitigations.

Pay and Benefits

Salary: CAD 133,000 - 183,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEquity

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
•Comfort reading, navigating, and reasoning about code, including in unfamiliar codebases.
•Experience using Git and GitHub (or similar version-control workflows), including pull requests and code review.
•Foundational understanding of common web, API, mobile, cloud, and application security risks (e.g., OWASP Top 10, authentication/authorization, injection, secrets exposure).

Experience:0Application securityVulnerability managementOffensive securityPenetration testingSecurity operations

Skills:CommunicationCollaborationGrowth mindsetRisk reasoningProduct empathy

Languages:English

Tech Stack:PythonJavaScript/TypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10

Company Brief

Affirm

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn