Senior Platform Security Engineer

Senior Platform Security Engineer at Affirm

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

We protect and secure Affirm’s production infrastructure while balancing risk to enable business growth.

We are seeking a Senior Security Engineer in the Security Engineering and Architecture team, primarily supporting Infrastructure and Platform Security. Focus areas include vulnerability management, cloud security, perimeter and network security, and hardening of critical environments. The engineer will work closely with corporate/workforce security, incident response, security operations, identity and access systems, and partner with infrastructure engineering teams that build, operate, and manage compute, storage, caching, and security systems at scale.

• Drive infrastructure, network and perimeter security initiatives for hardening and segmentation.
• Work across multiple engineering functions and organizations to advocate for security practices.
• Influence, align and implement security features across engineering teams.
• Demonstrate expertise across various domains to design and develop scalable solutions.
• Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection.
• Specify, standardize, configure, and validate access controls across a wide range of cloud services. Integrate security tooling into existing infrastructure.
• Develop security software configurations and improve tool functionality over time. Implement security controls across Affirm’s data infrastructure, including S3, Dynamo
  
  DB, RDS, and Snowflake.
• Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.

• A proven track record of tackling difficult and ambiguous challenges and driving them to success.
• Capable of shifting focus in a complex, ever-changing environment to balance between security risks and business agility.
• Strong in multiple domains including infrastructure operations (e.g., networking, systems, storage), Corporate IT, and able to make technical trade-offs between short vs. long-term security business decisions.
• Hands‑on experience deploying infrastructure within a Kubernetes environment.
• Experience developing and deploying cloud services using Terraform.
• Understanding of methods and systems used for auditing usage and access to AWS cloud services.
• Experience managing security tooling, including Wiz, Auditbeat, Crowdstrike Falcon EDR, AWS System Manager Agent, or similar.
• BS degree in a related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.

N

6

• Health care coverage –
  Affirm covers all premiums for all levels of coverage for you and your dependents.
• Flexible Spending Wallets – generous stipends for spending on technology, food, various lifestyle needs, and family forming expenses.
• Time off – competitive vacation and holiday schedules allowing you to take time off to rest and recharge.
• ESPP – An employee stock purchase plan enabling you to buy shares of Affirm at a discount.

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance,
Affirm will consider qualified applicants with arrest and conviction records.

By clicking “Submit Application,” you acknowledge that you have read Affirm’s Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.

Mid‑Senior level

Full‑time

Information Technology