Staff Product Security Engineer

Summary

Join Affirm's Security team as a Staff Security Engineer and contribute to a company that is reinventing credit. You will focus on infrastructure and platform security, working on vulnerability management, cloud security, and perimeter and network security. The role involves collaborating with various engineering teams to implement security features and solutions. You will need experience in infrastructure operations, cloud services (AWS), and security tooling. Affirm offers competitive benefits, including 100% subsidized medical coverage for you and your dependents, flexible spending wallets, and competitive time off.

Requirements

• A proven track record of tackling difficult and ambiguous challenges and driving them to success
• Capable of shifting focus in a complex, ever changing environment to balance between security risks and business agility
• Strong in multiple domains including infrastructure operations (e.g. networking, systems, storage), Corporate IT, able to make technical trade-offs between short versus long term security business decisions
• Hands-on experience deploying infrastructure within a Kubernetes environment
• Experience developing and deploying cloud services using Terraform
• Understanding of methods and systems used for auditing usage and access to AWS cloud services
• Experience managing security tooling, including Wiz, Auditbeat, Crowdstrike Falcon EDR, AWS System Manager Agent, or similar
• BS degree in related field or equivalent experience

Responsibilities

• Drive infrastructure, network and perimeter security initiatives for hardening and segmentation
• Work across multiple engineering functions and organizations to advocate for security practices
• Influence, align and implement security features across engineering teams
• Demonstrate expertise across various domains to design and develop scalable solutions
• Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection
• Specify, standardize, configure, and validate access controls across a wide range of cloud services. Integrate security tooling into existing infrastructure
• Develop security software configurations and improve tool functionality over time. Implement security controls across Affirm’s data infrastructure, including S3, DynamoDB, RDS, and Snowflake
• Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure

Preferred Qualifications

MS degree in a related field or equivalent experience is a plus

Benefits

• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount