Security Engineer, Intern (Summer 2024)

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

Are you passionate about security and eager to make a real-world impact? Join us on a journey where your engineering skills will shape the future of finance.

Affirm values information security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. As a member of the Information Security team at Affirm, you will be joining a team of fun, passionate and highly skilled individuals who like solving security challenges and enjoy learning new skills. We partner together with a team first mindset and are keen on redefining security in the fintech space. 

We are looking for an intern who will be primarily supporting the Enterprise Security team and will work on meaningful projects that will help enhance Affirm’s security posture. The Enterprise Security program’s main mission is to protect our brand, employees, infrastructure and intellectual property while enabling rapid business execution. Through this role, you will have the opportunity to learn and contribute to enhancing our preventive, detective and responsive security controls against information security threats. 

• We're excited to launch this brand new hybrid office Intern program for computer science or related majors. The program will kick off in May/June 2024.
• You will work out of the San Francisco office and participate in our direct mentorship program. 
• This program requires you to work out of the office for three days a week—Tuesday, Wednesday, and Thursday—to collaborate with your team, early career Affirmers, and your mentor. You'll experience the best of both worlds: the in-office experience and remote work. 
• You'll be paired with a mentor who you'll work alongside and meet with weekly.

What You'll Do

• Partner with security engineers across the following four functions within the Enterprise Security team - Corporate Security, Identity & Access Management (IAM), Platform Security & Security Operations. 
• You will get to contribute to projects in areas including but not limited to: 
• Tuning tools to improve our Data Loss Prevention (DLP) classification 
• Enhancing our Vulnerability Management Program 
• Developing automations to improve operations workflows 
• Working on engineering projects to grow our logging & detection program
• Improving  Incident Response Processes & Procedures 
• Applying IAM controls across a variety of users, applications and services 
• Collaborate with cross functional Security teams such as Product Security & Security Risk Management to learn about their functions as well. 
• We pair interns with a dedicated mentor who will be by your side to give advice and ensure the success of your project. Expect to meet with them on a regular basis and receive feedback.
• There are opportunities to attend events with other interns and full-time Affirmers! Past events have included virtual cooking classes, executive fireside chats, Hackathons, etc. 
• Interns present their work to the entire engineering organization at the end of the internship.

What We Look For:

• Strong ethical and discretionary ability to handle sensitive information and data. 
• Curious and motivated learner: University enrolled student who has experience or interest in information security. 
• Ability to collaborate with other team members and open to receiving feedback. 
• Good communication skills with an interest in learning to communicate security issues to a range of audience. 
• Analyze information and evaluate results to choose the best solution to effectively solve challenges. 
• Experience with Python or similar language to help develop API integrations. 
• Some knowledge of cloud security fundamentals is preferred (AWS or similar). 

Compensation is a set amount for the Intern role with no range.

USA hourly base pay: $55.00

USA monthly base pay: $9,500

Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.

We’re extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include: 

• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents 
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.

By clicking "Submit Application," you acknowledge that you have read the Affirm Employment Privacy Policy for applicants within the United States, the EU Employee Notice Regarding Use of Personal Data (Poland) for applicants applying from Poland, the EU Employee Notice Regarding Use of Personal Data (Spain) for applicants applying from Spain, or the Affirm U.K. Limited Employee Notice Regarding Use of Personal Data for applicants applying from the United Kingdom, and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.