• You are actively involved in firmware development for next-generation flash controllers and play a key role in developing the security architecture and new security features • You work on concepts for data and firmware security and their implementation • You collaborate closely with our test team to achieve comprehensive validation of our products' security features • You support product certifications according to internationally recognized security standards (e.g., FIPS, NIST, TCG, OCP)

• Partner with Affirm product teams to ensure that security is included in every phase of the product development lifecycle. • Conduct threat modeling and architecture reviews to ensure threats are understood, documented, and mitigated. • Review and analyze product source code to identify security vulnerabilities and provide recommendations for secure implementation. • Seek out opportunities to automate processes when appropriate. • Identify emerging classes of vulnerabilities and developing solutions for them before they’re a problem. • Assist product teams in the development of security focused test cases to enforce security requirements. • Advise product teams on business security requirements early in the product development lifecycle. • Decompose large, cross-team projects into individual tasks. Manage scope across teams and drive toward project closure.

• Design, build, and maintain SAP roles, profiles, and authorizations across SAP landscapes (ECC, S/4HANA, BW, etc.) • Administer user access, including provisioning, deprovisioning, and role assignments in accordance with least privilege principles • Perform Segregation of Duties (SoD) analysis and remediation using tools such as GRC Access Control (or equivalent) • Support SAP security audits, compliance reviews, and Authority to Operate (ATO) activities • Implement and maintain security controls aligned with DoD RMF and STIG requirements • Monitor and respond to security incidents, vulnerabilities, and access-related issues • Collaborate with Basis and infrastructure teams to secure SAP systems in AWS or hybrid cloud environments • Develop and maintain security documentation, policies, and standard operating procedures • Support integration security across SAP modules and external interfaces

• You will help design, build, and tune security tooling that improves security of code and CI/CD pipelines while maintaining code deployment velocity. • You will help design, implement, and maintain scalable security controls for our cloud environments without impacting deployment speeds and platform stability. • You will help define, implement, and enforce our AI security policies and procedures. • You will aid our Product Managers in developing secure and resilient product designs by addressing risks you’ve identified through threat modeling. • You will help maintain our vulnerability management, bug bounty, and penetration testing programs. • Most importantly, you’ll develop close, collaborative relationships with other technical experts in our Product, Platform Engineering, Software Engineering, IT, and Detection & Response functions.