Staff Security Engineer

Affirm

7d • Remote

About The Position

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. What You'll Do: Partner with Product teams to ensure that products are designed, built, and operated securely; Specific duties include: building and architecting security software; Partnering with the Product teams to ensure that security is included in every phase of the product development lifecycle; Conducting threat modeling activities with Product teams to ensure product threats are understood, documented, and mitigated; Conducting reviews of product architecture to ensure products are developed securely; Conducting security reviews of product cloud services configuration and providing secure cloud configuration guidance for Product teams; Assisting Product teams in the development of security focused test cases to enforce security requirements; Advising Product teams on business security requirements early in the product development lifecycle; Reviewing and analyzing product source code to identify security vulnerabilities and providing recommendations for secure implementation; May telecommute.

Requirements

• Bachelor's degree (or foreign equivalent) and five years of experience
• Using software development and delivery techniques to develop cloud-based services
• Conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies
• Standard authentication mechanisms, including SAML and OAuth2
• Knowledge of continuous integration/continuous deployment (CI/CD) processes and tools

Responsibilities

• Partner with Product teams to ensure that products are designed, built, and operated securely
• Building and architecting security software
• Partnering with the Product teams to ensure that security is included in every phase of the product development lifecycle
• Conducting threat modeling activities with Product teams to ensure product threats are understood, documented, and mitigated
• Conducting reviews of product architecture to ensure products are developed securely
• Conducting security reviews of product cloud services configuration and providing secure cloud configuration guidance for Product teams
• Assisting Product teams in the development of security focused test cases to enforce security requirements
• Advising Product teams on business security requirements early in the product development lifecycle
• Reviewing and analyzing product source code to identify security vulnerabilities and providing recommendations for secure implementation

Benefits

• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees