Staff Product Security Engineer

🔥 0 minutes ago

🏄 California, Connecticut, +3 more states – Remote

🏄 California – Remote 🦌 Connecticut – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote ☕ Washington – Remote

💵 $230k - $290k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Affirm

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💳 Fintech

👥 B2C

🛍️ eCommerce

💰 Post-IPO Equity on 2021-01

Fintech • B2C • eCommerce

Affirm is a financial technology company that offers a 'Buy Now, Pay Later' service, allowing consumers to make purchases and pay for them over time with flexible payment plans. Affirm eliminates hidden fees and compound interest, providing clear terms and conditions for its users. The company also offers the Affirm Card, a debit card that allows users to request to pay over time for larger purchases or pay in full for smaller ones. Affirm partners with various retailers across multiple categories, including electronics, apparel, and travel, providing customers with the convenience of paying over time at checkout both online and in physical stores. Affirm's services are integrated with Apple Pay, enabling customers to make payments seamlessly from their iPhone or iPad.

📋 Description

• Design, build, and operate CIAM backend services for customer registration, authentication, authorization, account lifecycle, and profile management • Implement OAuth 2.0, OIDC, SAML, and SCIM identity standards • Develop Python and Kotlin backend APIs and services for web, mobile, and partner applications • Integrate CIAM platforms with user data stores, messaging, fraud signals, and downstream customer platforms • Own secure authentication and account flows, including MFA, step-up authentication, device binding, consent, and adaptive authentication • Automate CIAM infrastructure and deployments with Infrastructure as Code and CI/CD pipelines • Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection • Collaborate with product, frontend, mobile, security, and partner engineering teams

🎯 Requirements

• 7+ years designing, developing, and launching backend systems at scale using Python or Kotlin • 5+ years of professional backend software engineering experience • Strong CIAM systems implementation experience • Deep hands-on knowledge of OAuth 2.0, OIDC, SAML, and SCIM • Production experience in Python or a similar backend language • Experience designing APIs, automation frameworks, and distributed systems • Hands-on experience building and maintaining CI/CD pipelines • Experience with GitHub workflows and Buildkite or similar build systems • Cloud-native development experience, preferably AWS • Experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs • Understanding of API design, data modeling, latency, error handling, and observability • Infrastructure as Code and automation experience, such as Terraform • Security engineering fundamentals including access control, token handling, encryption, MFA, and privacy by design • Ability to collaborate with product, frontend, mobile, and security teams • Familiarity with Cursor and AI-augmented development environments

🏖️ Benefits

• 100% subsidized medical coverage for employees and dependents • Dental and vision coverage for employees and dependents • Monthly stipends for health, wellness, and tech spending • Flexible Spending Wallets with stipends for Technology, Food, Lifestyle needs, and family forming expenses • Competitive vacation and holiday schedules • Employee stock purchase plan (ESPP) enabling discounted Affirm shares • Reasonable accommodations during the hiring process