Senior Manager, Product Security Engineering (Platform Security)

Who you are

You have 5+ years of experience in security engineering, with a strong focus on cloud security and infrastructure protection. Your background includes leading teams and mentoring engineers, ensuring effective communication and collaboration across distributed teams. You possess deep expertise in AWS, GCP, and Azure, and understand the nuances of securing cloud-hosted systems and applications. You are well-versed in container security, having guided secure design and operation of containerized environments using Docker and Kubernetes. Your experience with DevSecOps practices allows you to embed automated security checks and workflows into CI/CD pipelines effectively. You are skilled at communicating complex security risks and trade-offs to both technical and non-technical stakeholders, ensuring alignment with organizational goals.

Desirable

Experience with security frameworks and compliance standards is a plus. Familiarity with threat modeling and risk assessment methodologies will enhance your ability to influence architecture decisions and define security requirements. You are passionate about building a strong security culture within the organization and are eager to drive initiatives that promote security awareness among all employees.

What you'll do

In this role, you will lead the Platform Security team, setting direction and managing performance while fostering a culture of security across the organization. You will design, implement, and operate cloud security controls to protect Affirm's infrastructure, services, and applications from evolving threats. Partnering with engineering and product leadership, you will influence architecture decisions and ensure that security requirements are integrated into the technical strategy. You will strengthen container security by guiding the secure design and operation of containerized environments, leveraging your expertise in Docker and Kubernetes. Additionally, you will drive the adoption of DevSecOps practices, embedding automated security checks and workflows into CI/CD pipelines and developer tooling. Your role will also involve communicating complex security risks and trade-offs to stakeholders, ensuring that security considerations are prioritized in product development.

What we offer

At Affirm, we are committed to creating a culture that values security and transparency. You will have the opportunity to work with a talented team dedicated to building honest financial products. We offer competitive compensation and benefits, along with a flexible work environment that supports remote work across the United States. Join us in our mission to reinvent credit and make it more honest and friendly for consumers.