Product Security Engineer Jobs at Affirm with Visa Sponsorship
Product Security Engineer jobs at Affirm focus on protecting its buy-now-pay-later infrastructure, working across application security, threat modeling, and compliance in a regulated financial environment. Affirm has a consistent track record of sponsoring work visas for engineering roles, including this function, making it a realistic target for international candidates.
Find Product Security Engineer Jobs at AffirmOverview
Showing 5 of 29+ Product Security Engineer Jobs at Affirm
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Product Security Engineer Jobs at Affirm
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Product Security Engineer Jobs at Affirm.
Get Access To All JobsINTRODUCTION
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm values information security as a critical part of the company's continued success. Our mission is to make information security programmatic and cultural in Affirm, enabling the company to succeed in building honest financial products. The Security team posture increases security and reduces risk while securely enabling access to information for those who need it!
ROLE AND RESPONSIBILITIES
The Staff Product Security Engineer candidate will have experience building and architecting software as part of a larger team. The ideal candidate will work effectively with product and engineering teams to evaluate and influence product requirements, design, and implementation to improve the security of Affirm's products.
- Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle.
- Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated.
- Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation.
- Seek out opportunities to automate processes when appropriate.
- Identify emerging classes of vulnerabilities and developing solutions for them before they're a problem.
- Assist product teams in the development of security focused test cases to enforce security requirements.
- Advise product teams on business security requirements early in the product development lifecycle.
- Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.
BASIC QUALIFICATIONS
- Deep understanding of web application architecture and design principles
- Experience using modern software development and delivery techniques to develop cloud-based services. Python, Kotlin, Java, AWS, and Azure experience preferred.
- Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
- Experience with PCI or other regulated environments.
- Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
- Experience with standard authentication mechanisms, including SAML and OAuth2.
- Understanding of continuous integration / continuous deployment processes and tools.
- BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.
LOCATION
Location - Remote U.S.
COMPENSATION
Pay Grade - P
Equity Grade - 13
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $225,000 - 275,000 USD
USA base pay range (all other U.S. states) per year: $200,000 - 250,000 USD
#LI-Remote
Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.
We're extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:
- Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
- Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
- Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
- ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount
We believe It's On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.
Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.
By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.
INTRODUCTION
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm values information security as a critical part of the company's continued success. Our mission is to make information security programmatic and cultural in Affirm, enabling the company to succeed in building honest financial products. The Security team posture increases security and reduces risk while securely enabling access to information for those who need it!
ROLE AND RESPONSIBILITIES
The Staff Product Security Engineer candidate will have experience building and architecting software as part of a larger team. The ideal candidate will work effectively with product and engineering teams to evaluate and influence product requirements, design, and implementation to improve the security of Affirm's products.
- Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle.
- Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated.
- Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation.
- Seek out opportunities to automate processes when appropriate.
- Identify emerging classes of vulnerabilities and developing solutions for them before they're a problem.
- Assist product teams in the development of security focused test cases to enforce security requirements.
- Advise product teams on business security requirements early in the product development lifecycle.
- Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.
BASIC QUALIFICATIONS
- Deep understanding of web application architecture and design principles
- Experience using modern software development and delivery techniques to develop cloud-based services. Python, Kotlin, Java, AWS, and Azure experience preferred.
- Knowledge of common security flaws and resolution as published by OWASP, SANS, etc.
- Experience with PCI or other regulated environments.
- Experience conducting threat models for complex, distributed products using standard threat modeling techniques and methodologies.
- Experience with standard authentication mechanisms, including SAML and OAuth2.
- Understanding of continuous integration / continuous deployment processes and tools.
- BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.
LOCATION
Location - Remote U.S.
COMPENSATION
Pay Grade - P
Equity Grade - 13
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $225,000 - 275,000 USD
USA base pay range (all other U.S. states) per year: $200,000 - 250,000 USD
#LI-Remote
Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.
We're extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:
- Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
- Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
- Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
- ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount
We believe It's On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.
Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.
By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.
See all Product Security Engineer Jobs at Affirm
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Product Security Engineer Jobs at Affirm.
Get Access To All JobsTips for Finding Product Security Engineer Jobs at Affirm
Frame your security credentials around fintech compliance
Affirm operates under PCI-DSS and SOC 2 requirements. Certifications like OSCP, CISSP, or AWS Security Specialty signal direct relevance to their stack and strengthen your profile before an H-1B petition is even initiated.
Target Affirm's product security team directly
Affirm's security engineering roles sit within product teams, not a separate IT function. Apply to roles that mention secure SDLC, threat modeling, or API security rather than general information security positions, which have different sponsorship pathways.
Clarify OPT STEM extension eligibility early
Computer science and information security degrees typically qualify for the 24-month STEM OPT extension. Confirm your degree's CIP code with your DSO before accepting an offer, so Affirm's HR team can plan around your full authorized work window.
Ask about H-1B filing timing in the offer stage
USCIS opens H-1B registration in March for an October 1 start date. If your offer comes outside that window, clarify whether Affirm will use cap-exempt status or bridge you through OPT or TN while you wait for the next lottery cycle.
Use Migrate Mate to surface open Product Security Engineer roles at Affirm
Affirm's visa-sponsored openings are not always prominently labeled on general job boards. Migrate Mate filters specifically for sponsored roles, so you can track active Product Security Engineer listings at Affirm without manually screening each posting.
Understand how PERM affects long-term sponsorship timelines
If Affirm offers EB-2 or EB-3 sponsorship, DOL's PERM labor certification process typically takes 12 to 18 months before an I-140 is filed. Indian and Chinese nationals should factor priority date backlogs into their career planning at this stage.
Frequently Asked Questions
Does Affirm sponsor H-1B visas for Product Security Engineers?
Yes, Affirm sponsors H-1B visas for Product Security Engineers. As a fintech company with significant engineering headcount, Affirm participates in the annual H-1B lottery and has sponsored engineers across security-focused roles. If you receive an offer, confirm with the recruiting team whether they file under cap-subject or any cap-exempt arrangements, and clarify the expected timeline relative to the October 1 start date.
Which visa types does Affirm commonly sponsor for Product Security Engineer roles?
Affirm sponsors H-1B visas as the primary work authorization pathway for Product Security Engineers. F-1 OPT and CPT are supported for students and recent graduates, including the 24-month STEM OPT extension for qualifying degrees. TN visa status is available for Canadian and Mexican nationals in eligible classifications. For long-term permanent residence, Affirm has supported EB-2 and EB-3 Green Card sponsorship for engineering roles.
What qualifications does Affirm look for in Product Security Engineer candidates?
Affirm typically looks for experience in application security, secure code review, and threat modeling within cloud-native or API-heavy environments. Familiarity with AWS security, Python or Go, and compliance frameworks like PCI-DSS is directly relevant given Affirm's financial services context. A bachelor's degree in computer science, cybersecurity, or a related field is generally required to support specialty occupation classification under the H-1B.
How do I apply for Product Security Engineer jobs at Affirm?
You can find and apply for Product Security Engineer roles at Affirm through Migrate Mate, which surfaces Affirm's visa-sponsored engineering openings in one place. When applying, tailor your resume to highlight secure SDLC, API security, or fintech compliance experience. Affirm's interview process for security engineering typically includes a technical screen, a security-focused take-home or live coding round, and system design focused on threat modeling.
How do I manage timing between my visa status and an Affirm offer?
If you're on OPT, confirm your remaining authorized period and STEM extension eligibility before your start date. Affirm will need to file an H-1B petition during the March registration window for an October 1 start. If your OPT expires before October 1, the cap-gap rule under USCIS guidelines may bridge your status, but your DSO and Affirm's immigration counsel should confirm this applies in your specific situation.