Staff Security Engineer - Corporate Security

2 days ago

Apply Now

Receive Emails with Similar Jobs

Affirm

WebsiteLinkedInAll Job Openings

We’re excited to announce that Affirm is now a remote-first company$1. !$1

eCommerce • Payments • Installment Loans • Millennials • Financial Services

1001 - 5000

💰 Post-IPO Equity on 2021-01

Description

•Design, implement and maintain security measures for corporate systems •Design, build and integrate security tooling to manage our corporate systems •Perform security design review, code review, threat modeling and architecture reviews •Manage the Corporate Vulnerability Management program •Develop and enforce security policies, standards and best practices •Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection •Contribute to developing and maturing corporate security playbooks and processes •Collaborate with cross functional teams across Affirm and lead key Security projects •Participant in security on call and serve as the senior escalation point for the team when needed for help with investigations and incidents

Requirements

•A seasoned Enterprise Security engineer with a strong ability to design, build, evaluate and maintain systems. •Experience leading investigations and incidents including containment actions and remediation when needed in a cloud heavy environment (AWS preferred). •Demonstrated experience in common Enterprise Security tooling including but not limited to: SIEM (Elastic/Splunk), EDR (CrowdStrike/SentinelOne), ZTNA (Netskope/Zscaler), SSPM (AppOmni or similar) and IDP (Okta/Onelogin). •Demonstrated experience and deep subject matter expertise in Corporate systems including but not limited to: Snowflake, Salesforce, Github, Google Workspace, AWS Slack, Notion, Jira, Zendesk, Microsoft 365, and Workday •Experience with designing and deploying endpoint management and visibility solutions such as Jamf, Intune, and OSQuery. •Experience leading an enterprise vulnerability management program using tools such as Rapid7, Crowdstrike Spotlight, Qualys or similar. •Experience with developing native data ingestion and data normalization integrations. •Familiarity with container orchestration technologies (Kubernetes). •Experience developing and deploying cloud services using Infrastructure as code with Terraform or similar. •Experience with Python or similar language to build security tooling. •Experience building systems with AWS or similar cloud environments. •Ability to lead and drive cross functional projects with stakeholders throughout the organization. •Strong communication skills with the ability to switch communication style when needed between technical and non-technical audiences. •This position requires either equivalent practical experience or a Bachelor’s degree in a related field.

Benefits

•Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents •Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses •Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge •ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount