Чётко описанная senior-роль в продуктовой финтех-компании: можно влиять на безопасность продуктов, а условия и льготы выглядят привлекательными.
Кликните для подробной информации
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Product Security Engineer (Fintech): Securing Affirm’s financial products across the product development lifecycle with an accent on threat modeling, architecture reviews, source-code analysis, and secure implementation. Focus on identifying emerging vulnerabilities, automating security processes, designing security-focused tests, and coordinating complex cross-team security projects.
Location: Remote within the United States; occasional in-person work at an Affirm office and in-person onboarding may be required.
Base pay: $195,000–$255,000 USD per year in CA, WA, NY, NJ, and CT; $173,000–$233,000 USD per year in other U.S. states.
Company
Affirm develops transparent financial products that let people pay over time without hidden fees.
What you will do
Partner with product teams to integrate security throughout the product development lifecycle.
Conduct threat modeling and architecture reviews for complex distributed products.
Review product source code, identify vulnerabilities, and recommend secure implementations.
Identify emerging vulnerability classes, develop preventive solutions, and automate security processes where appropriate.
Help product teams create security-focused test cases and define business security requirements early in development.
Break down large cross-team projects, manage scope, and drive projects to completion.
Requirements
Deep understanding of web application architecture and design principles.
Experience building and architecting software as part of a larger team.
Knowledge of common security flaws and their remediation, including OWASP and SANS guidance.
Experience working with PCI or other regulated environments.
Experience conducting threat models for complex, distributed products using standard methodologies.
Experience with standard authentication mechanisms, including SAML and OAuth2.
Understanding of continuous integration and continuous delivery processes and tools.
BS degree in a related field or equivalent experience.
Nice to have
Experience developing cloud-based services using modern software development and delivery techniques.
Experience with Python, Kotlin, Java, AWS, and Azure.
MS degree in a related field or equivalent experience.
Culture & Benefits
Remote-first work model with flexibility within the country of employment.
100% subsidized medical coverage for employees and dependents, plus dental and vision coverage.
Monthly technology, health, and wellness spending stipends.
Flexible time off and generous holiday calendars.
Employee stock purchase plan with discounted Affirm stock.
Inclusive interview process with accommodations available for candidates with disabilities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →