Teams at Affirm

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Leads Affirm’s Resilience Engineering team, defining strategy and managing engineers who build platforms for safe production load testing and chaos engineering. Owns fault-injection and experimentation systems, safeguards, observability, rollback mechanisms, monitoring, and incident response practices. Partners cross-functionally to identify systemic weaknesses, improve reliability, and embed resilience validation into engineering workflows. Requires leadership experience in reliability, infrastructure, or distributed systems and hands-on expertise with production testing, chaos engineering, cloud-native environments, and distributed-system failure modes.

Supports application security across product and engineering teams by reviewing code, configurations, designs, logs, and vulnerabilities. Assesses and prioritizes risks, guides remediation, contributes scripts, detections, tests, secure defaults, and automation, and improves vulnerability management workflows. Collaborates with technical and non-technical stakeholders to communicate risk, recommend mitigations, and connect AppSec practices to customer trust, compliance, resilience, and business outcomes.