Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Partner with product and engineering teams to identify application security risks and translate them into business risk, launch options, and remediation next steps. Review code, configs, PRs, logs, and documentation; contribute secure coding guidance, automation, and lightweight tooling to scale AppSec. Evaluate vulnerabilities from testing, bug bounty, tooling, and penetration tests, and support vulnerability management workflows including triage, validation, severity assessment, guidance, tracking, and reporting.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and frame them as clear business risks, launch options, and recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Work in GitHub to review code changes, participate in pull request discussions, track remediation work, and collaborate with engineers.
•Evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, penetration tests, and other sources; support vulnerability management workflows including triage, validation, severity assessment, remediation guidance, tracking, and reporting.

Pay and Benefits

Salary: USD 146,000 - 225,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEspp

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
•Comfort reading, navigating, and reasoning about code, including in unfamiliar codebases.
•Experience using Git and GitHub or similar version-control workflows (branches, commits, pull requests, code review, issues, project tracking).
•Some hands-on experience building, testing, breaking, or securing software (e.g., security labs, CTFs, bug bounties, open-source, automation scripts, coursework).

Experience:0Application securityVulnerability managementPenetration testingSecurity operationsSecurity labsBug bounty

Skills:CollaborationCommunicationRisk-based reasoningProduct empathyGrowth mindset

Languages:English

Tech Stack:PythonJavaScriptTypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10

Company Brief

Affirm

Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and frame them as clear business risks, launch options, and recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Work in GitHub to review code changes, participate in pull request discussions, track remediation work, and collaborate with engineers.
•Evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, penetration tests, and other sources; support vulnerability management workflows including triage, validation, severity assessment, remediation guidance, tracking, and reporting.

Pay and Benefits

Salary: USD 146,000 - 225,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEspp

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, Kotlin, or similar.
•Comfort reading, navigating, and reasoning about code, including in unfamiliar codebases.
•Experience using Git and GitHub or similar version-control workflows (branches, commits, pull requests, code review, issues, project tracking).
•Some hands-on experience building, testing, breaking, or securing software (e.g., security labs, CTFs, bug bounties, open-source, automation scripts, coursework).

Experience:0Application securityVulnerability managementPenetration testingSecurity operationsSecurity labsBug bounty

Skills:CollaborationCommunicationRisk-based reasoningProduct empathyGrowth mindset

Languages:English

Tech Stack:PythonJavaScriptTypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10

Company Brief

Affirm

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn