Senior Product Security Engineer

About This RoleAI processing…

Key Responsibilities

• 1
  Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle.
• 2
  Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated.
• 3
  Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation.
• 4
  Seek out opportunities to automate processes when appropriate.
• 5
  Identify emerging classes of vulnerabilities and developing solutions for them before they’re a problem.
• 6
  Assist product teams in the development of security focused test cases to enforce security requirements.
• 7
  Advise product teams on business security requirements early in the product development lifecycle.
• 8
  Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.

Requirements

• Deep understanding of web application architecture and design principles
• Experience using modern software development and delivery techniques to develop cloud-based services. Python, Kotlin, Java, AWS, and Azure experience preferred.
• Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
• Experience with PCI or other regulated environments.
• Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
• Experience with standard authentication mechanisms, including SAML and OAuth2.
• Understanding of continuous integration / continuous deployment processes and tools.
• BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.

Perks & Benefits