Product Security Engineer II

RemotemidPosted Aug 17, 2026

PythonJavaScriptTypeScriptKotlin+4 more

About this role

Join Affirm's Application Security team to help build and launch secure products that earn customer trust. You'll assess application risks, support vulnerability management, partner with engineering on secure design, and contribute tooling that helps AppSec scale across the company.

Must have

0-2+ years in application security, software engineering, or equivalent practical experience

Foundational programming ability in Python, JavaScript/TypeScript, Kotlin, or similar

Comfort reading and reasoning about code in unfamiliar codebases

Experience with Git and GitHub workflows including pull requests and code review

Hands-on experience building, testing, breaking, or securing software

Ability to write clear scripts to automate workflows and analyze data

Foundational understanding of OWASP Top 10 and common web/API/cloud security risks

Interest in offensive security with exposure to tools like Burp Suite or CTF environments

Exposure to vulnerability management concepts including triage and risk-based prioritization

Strong written and verbal communication skills for technical and non-technical audiences

Technologies

PythonJavaScriptTypeScriptKotlinGitGitHubCI/CDBurp Suite

Responsibilities

Partner with product and engineering teams to identify and frame application security risks

Read code, configuration, pull requests, and logs to understand systems and find security risks

Contribute code changes, scripts, detections, and automation to improve AppSec workflows

Review code changes in GitHub and collaborate with engineers on security issues

Evaluate vulnerabilities from testing, bug bounty, tooling, and penetration tests

Contribute to vulnerability management workflows including triage and remediation tracking

Translate recurring findings into secure coding guidance, checklists, and paved paths

Work with engineers on system designs, data flows, trust boundaries, and auth models

Communicate security issues clearly with risk, tradeoffs, and mitigations to all audiences

Build relationships across teams and influence security outcomes without formal authority

Benefits

Health insuranceDental insuranceVision insuranceEmployee share purchase planWellness allowanceHome office allowanceParental leaveFlexible vacation timeCompetitive salaryStock options

Amenities

Flexible Spending Wallets for technology, food, lifestyle needs, and family forming expensesCompetitive vacation and holiday schedules to rest and recharge