Product Security Engineer II (Fintech)

TL;DR

Product Security Engineer II (Fintech): Identifying and mitigating application security risks for a credit platform with an accent on code-informed analysis and vulnerability management. Focus on automating AppSec workflows, performing secure design reviews, and collaborating with engineering teams to reduce business risk.

Location: Remote Canada (Must be residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan)

Salary: CAD $133,000 - $183,000

Company

Affirm is a fintech company reinventing credit to provide honest and friendly "buy now, pay later" services without hidden fees.

What you will do

• Partner with product and engineering teams to identify and frame application security risks as business risks.
• Analyze application code, configurations, pull requests, and logs to detect security vulnerabilities.
• Develop scripts, automation, and secure defaults to improve AppSec workflows and scale security across the organization.
• Triage and validate vulnerabilities from bug bounty reports, internal testing, and penetration tests.
• Translate recurring findings into secure coding guidance and developer-facing documentation.
• Collaborate with engineers on system designs, trust boundaries, and authentication models.

Requirements

• 0–2+ years of experience in application security, software engineering, or penetration testing.
• Foundational programming skills in Python, JavaScript/TypeScript, or Kotlin.
• Proficiency with Git and GitHub workflows, including pull requests and code reviews.
• Understanding of OWASP Top 10 and common web, API, and cloud security risks.
• Ability to reason about risk and tradeoffs to provide pragmatic mitigation strategies.
• Must be residing in Canada (specific provinces only).

Culture & Benefits

• 100% subsidized medical, dental, and vision coverage for employees and dependents.
• Flexible Spending Wallets for technology, food, lifestyle, and family forming expenses.
• Competitive vacation and holiday schedules for rest and recharge.
• Employee Stock Purchase Plan (ESPP) for discounted shares.
• Remote-first culture with high flexibility within the country of employment.