Product Security Engineer II

Affirm

RemotePosted July 28, 2026

About the role

Affirm is seeking a Product Security Engineer II to join the InfoSec & IT team. The Application Security team helps Affirm build and launch products that earn customer trust, meet compliance obligations, and reduce business risk. We partner closely with product, engineering, infrastructure, risk, compliance, and other teams to identify security risks early, recommend pragmatic mitigations, and help teams find safe paths to launch. This role is a great fit for someone with hands-on software or security experience, who enjoys reading and reasoning about code, is developing offensive security skills, and wants to apply those skills in a product-minded, risk-based way.

Product Security Engineer II

Affirm

RemotePosted July 28, 2026

About the role

Affirm is seeking a Product Security Engineer II to join the InfoSec & IT team. The Application Security team helps Affirm build and launch products that earn customer trust, meet compliance obligations, and reduce business risk. We partner closely with product, engineering, infrastructure, risk, compliance, and other teams to identify security risks early, recommend pragmatic mitigations, and help teams find safe paths to launch. This role is a great fit for someone with hands-on software or security experience, who enjoys reading and reasoning about code, is developing offensive security skills, and wants to apply those skills in a product-minded, risk-based way.

What You’ll Do - Partner with product and engineering teams to identify application security risks and frame them as clear business risks, options, and recommended next steps. - Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist. - Contribute small code changes, scripts, detections, tests, secure defaults, or automation that improve AppSec workflows and reduce recurring issues. - Work in GitHub to review code changes, understand engineering context, participate in pull request discussions, track remediation work, and collaborate with engineers. - Help evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, penetration tests, and other sources; partner with teams to prioritize and remediate issues based on real-world risk. - Contribute to vulnerability management workflows, including triage, s

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Product Security Engineer II

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Remote-first

Engineering Cybersecurity Fintech Remote Europe Startups

What You’ll Do - Partner with product and engineering teams to identify application security risks and frame them as clear business risks, options, and recommended next steps. - Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist. - Contribute small code changes, scripts, detections, tests, secure defaults, or automation that improve AppSec workflows and reduce recurring issues. - Work in GitHub to review code changes, understand engineering context, participate in pull request discussions, track remediation work, and collaborate with engineers. - Help evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, penetration tests, and other sources; partner with teams to prioritize and remediate issues based on real-world risk. - Contribute to vulnerability management workflows, including triage, s