Назад
1 день назад

Senior Product Security Engineer

195 000 - 255 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Product Security Engineer (Fintech): Securing Affirm’s financial products across the product development lifecycle with an accent on threat modeling, architecture reviews, source-code analysis, and secure implementation. Focus on identifying emerging vulnerabilities, automating security processes, designing security-focused tests, and coordinating complex cross-team security projects.

Location: Remote within the United States; occasional in-person work at an Affirm office and in-person onboarding may be required.

Base pay: $195,000–$255,000 USD per year in CA, WA, NY, NJ, and CT; $173,000–$233,000 USD per year in other U.S. states.

Company

Affirm develops transparent financial products that let people pay over time without hidden fees.

What you will do

  • Partner with product teams to integrate security throughout the product development lifecycle.
  • Conduct threat modeling and architecture reviews for complex distributed products.
  • Review product source code, identify vulnerabilities, and recommend secure implementations.
  • Identify emerging vulnerability classes, develop preventive solutions, and automate security processes where appropriate.
  • Help product teams create security-focused test cases and define business security requirements early in development.
  • Break down large cross-team projects, manage scope, and drive projects to completion.

Requirements

  • Deep understanding of web application architecture and design principles.
  • Experience building and architecting software as part of a larger team.
  • Knowledge of common security flaws and their remediation, including OWASP and SANS guidance.
  • Experience working with PCI or other regulated environments.
  • Experience conducting threat models for complex, distributed products using standard methodologies.
  • Experience with standard authentication mechanisms, including SAML and OAuth2.
  • Understanding of continuous integration and continuous delivery processes and tools.
  • BS degree in a related field or equivalent experience.

Nice to have

  • Experience developing cloud-based services using modern software development and delivery techniques.
  • Experience with Python, Kotlin, Java, AWS, and Azure.
  • MS degree in a related field or equivalent experience.

Culture & Benefits

  • Remote-first work model with flexibility within the country of employment.
  • 100% subsidized medical coverage for employees and dependents, plus dental and vision coverage.
  • Monthly technology, health, and wellness spending stipends.
  • Flexible time off and generous holiday calendars.
  • Employee stock purchase plan with discounted Affirm stock.
  • Inclusive interview process with accommodations available for candidates with disabilities.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →