Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Partner with product and engineering teams to identify and communicate application security risks as business risks and launch options. Read code, configuration, PRs, logs, and documentation to assess where vulnerabilities may exist, then help remediate issues through vulnerability management workflows. Contribute lightweight automation, detections, tests, and secure guidance to improve AppSec scaling, while growing your offensive and defensive security engineering skills.

Location: Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and frame them as business risks with recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand system behavior and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, and penetration tests; help prioritize and remediate based on real-world risk.
•Support vulnerability management workflows, including triage, validation, severity assessment, remediation guidance, tracking, and reporting.

Pay and Benefits

Salary: CAD 133,000 - 183,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEquityPaid Leave

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, or Kotlin.
•Comfort reading, navigating, and reasoning about code, including unfamiliar codebases.
•Experience using Git and GitHub (or similar) including branches, commits, pull requests, code review, issues, or project tracking.
•Some hands-on experience building, testing, breaking, or securing software (e.g., internships, security labs, CTFs, bug bounty, open source, automation scripts, or coursework).

Experience:0Application securityVulnerability managementPenetration testingSecurity operationsOffensive security

Skills:CollaborationCommunicationCuriosityGrowth mindsetRisk-based reasoning

Languages:English

Tech Stack:PythonJavaScriptTypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10APIsWeb securityMobile securityCloud security

Company Brief

Affirm

Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Affirm

3 days ago

Product Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Partner with product and engineering teams to identify application security risks and frame them as business risks with recommended next steps.
•Read application code, configuration, pull requests, logs, and documentation to understand system behavior and where security risks may exist.
•Contribute small code changes, scripts, detections, tests, secure defaults, or automation to improve AppSec workflows and reduce recurring issues.
•Evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, and penetration tests; help prioritize and remediate based on real-world risk.
•Support vulnerability management workflows, including triage, validation, severity assessment, remediation guidance, tracking, and reporting.

Pay and Benefits

Salary: CAD 133,000 - 183,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionEquityPaid Leave

Key Requirements

•0–2+ years of experience in application security, software engineering, security engineering, vulnerability management, penetration testing, security operations, or equivalent practical experience.
•Foundational programming ability in one or more languages such as Python, JavaScript/TypeScript, or Kotlin.
•Comfort reading, navigating, and reasoning about code, including unfamiliar codebases.
•Experience using Git and GitHub (or similar) including branches, commits, pull requests, code review, issues, or project tracking.
•Some hands-on experience building, testing, breaking, or securing software (e.g., internships, security labs, CTFs, bug bounty, open source, automation scripts, or coursework).

Experience:0Application securityVulnerability managementPenetration testingSecurity operationsOffensive security

Skills:CollaborationCommunicationCuriosityGrowth mindsetRisk-based reasoning

Languages:English

Tech Stack:PythonJavaScriptTypeScriptKotlinGitGitHubBurp SuiteOWASP Top 10APIsWeb securityMobile securityCloud security

Company Brief

Affirm

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2012

Website LinkedIn