Affirm values information security as a critical part of the company’s continued success. Our mission is to make information security programmatic and cultural in Affirm, enabling the company to succeed in building honest financial products. 

The Security team posture increases security and reduces risk while securely enabling access to information for those who need it! The ideal employee will have extensive experience developing tooling and infrastructure used for securing technical resources as part of a larger team. The candidate will quickly come up to speed with current systems and processes, identify and develop improvements, and implement solutions used by experienced software and infrastructure engineers across the organization. 

We protect and secure Affirm’s production infrastructure while balancing risk to enable business growth. 

We own vulnerability management, cloud security, perimeter security, and hardening of critical environments. We work closely with corporate/workforce security, incident response, security operations, identity and access systems and partner with infrastructure engineering teams that build, operate and manage compute, storage, caching and security systems at scale. 

What You’ll Do

• Develop and implement processes to ensure systems are regularly patched and hardened. 
• Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection. 
• Specify, standardize, configure, and validate access controls across a wide range of cloud services. Integrate security tooling into existing infrastructure. 
• Develop security software configurations and improve tool functionality over time. Implement security controls across Affirm’s data infrastructure, including S3, DynamoDB, RDS, and Snowflake. 
• Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure. 
  
  

What We Look For

• Security Engineer to help ensure that our systems and processes are secured against the latest threats.
• Strong in multiple domains including infrastructure operations, Corporate IT, able to make technical trade-offs between short versus long term security business logs. 
• Hands-on experience deploying infrastructure within a Kubernetes environment. 
• Experience developing and deploying cloud services using Terraform. 
• Understanding of methods and systems used for auditing usage and access to AWS cloud services. 
• Experience managing security tooling, including Rapid7 InsightVM, Auditbeat, Crowdstrike Falcon EDR, AWS System Manager Agent, or similar. 
• BS degree in related field or equivalent experience. MS degree in a related field or equivalent experience is a plus.