Senior Manager, Product Security Engineering (Platform Security)

Affirm

🔍 Observed

$260K - $310K USD

Remote US First seen 3 weeks, 1 day ago Last seen 2 hours, 40 minutes ago Greenhouse

Apply on Greenhouse Search Google for This Role

ATS links often expire — Google search finds the latest posting

Job Description

AI Summary

• Lead and mentor the Platform Security team while designing and operating cloud security controls across AWS, GCP, and Azure to protect Affirm's infrastructure and applications • Partner with engineering and product leadership to influence architecture decisions, define security requirements, and embed DevSecOps practices into CI/CD pipelines • Requires minimum 5 years of technical experience each in cloud computing/security, CI/CD automation, infrastructure-as-code tools (Terraform, Jenkins, GitLab), and container technologies (Docker, Kubernetes) • Develop platform security roadmap, define baseline security configurations and standards, and create metrics/dashboards to measure control effectiveness and program maturity • Strong background in threat modeling, MITRE ATT&CK frameworks, and advanced persistent threats; ability to communicate complex security risks clearly to both technical and non-technical stakeholders

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

Security is critical to Affirm’s mission. Our goal is to embed a strong security culture across the company so we can build and operate honest financial products. The Platform Security team forms the backbone of Affirm’s preventive and responsive security capabilities, protecting cloud-hosted systems and applications from threats.

The Sr. Manager, Product Security will lead the Platform Security team, partnering with engineering and cross-functional leaders to ensure Affirm’s cloud platforms, infrastructure, and applications are secure and resilient.

What You’ll Do

Lead, develop, and mentor the Platform Security team, setting direction, managing performance, and ensuring strong communication and execution across distributed time zones.
Design, implement, and operate cloud security controls for AWS, GCP, and Azure to protect infrastructure, services, and applications from evolving threats.
Partner with engineering and product leadership to influence architecture decisions, define security requirements, and ensure alignment with Affirm’s technical strategy.
Strengthen container security by guiding secure design and operation of containerized environments using Docker, Kubernetes, and related ecosystem tooling.
Drive adoption of DevSecOps practices by embedding automated security checks, workflows, and guardrails into CI/CD pipelines and developer tooling.
Communicate complex security risks, tradeoffs, and recommendations to technical and non-technical stakeholders with clarity, precision, and authority.
Develop and mature the platform security roadmap, identifying long-term risks, investments, and capabilities needed to strengthen Affirm’s cloud posture.
Define, maintain, and enforce baseline security configurations, standards, and operational processes for cloud platforms, systems, and applications.
Create and maintain security metrics and dashboards that provide meaningful insights into control effectiveness, program maturity, and areas needing investment.
Support budget planning, resource allocation, and team development, ensuring the program can scale effectively and deliver strong outcomes over time.

What We Look For

Minimum five years of technical experience across cloud computing, security, identity and access management, or IT infrastructure.
At least five years of experience implementing automated workflows in CI/CD, DevOps, or DevSecOps environments.
At least five years of experience with automation tools such as Terraform, Jenkins, GitLab, GitHub, or TFS.
At least five years of experience with containers and related technologies (Docker, Podman, Kubernetes).
Strong understanding of attacker methodologies, advanced persistent threats, kill chain models, MITRE ATT&CK, and threat detection patterns.
Knowledge of emerging threats and security countermeasures; experience partnering with threat intelligence and detection teams to proactively reduce risk.
Strong project management and people leadership skills.
Attention to detail and the ability to drive complex initiatives with minimal supervision.
Ability to communicate technical issues clearly to non-technical audiences.
Passion for working with diverse teams and integrating multiple perspectives into decision-making.
Experience in leading and managing through impactful incidents with senior stakeholders and decision makers.
Bachelor’s or Master’s degree from an accredited college or university.
Relevant certifications a plus (e.g., CISSP, CCSP, CCSK, AWS Certified Security Specialty, AWS Solutions Architect).

At Affirm, we value people above all else. Even if you don’t meet every listed requirement, we encourage you to apply. We want to meet people who believe in Affirm’s mission and can contribute in meaningful ways, not just those who check every box.

Affirm is proud to be an equal-opportunity employer. Learn more about our D&I efforts here!

Base Pay Grade - R

Equity Grade - 15

Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.

Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)

USA base pay range (CA, WA, NY, NJ, CT) per year: $260,000 - $310,000

USA base pay range (all other U.S. states) per year: $232,000 - $282,000

Location: Remote - US

#LI-Remote

Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.

We’re extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:

Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.

By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.

Quick Actions

Apply Externally Search Google Back to Jobs

Job Information

Company:
Affirm
Location:
Remote US
Work Location:
Remote
Experience Level:
Senior
Source:
Greenhouse
Status:
Active

Activity Score

65 /100

Likely Active (65)

Higher scores indicate more likely active hiring based on listing freshness, company activity, and other signals. Learn more →