Are you passionate about security and eager to make a real-world impact? Join us on a journey where your engineering skills will shape the future of finance.

Affirm values information security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. As a member of the Information Security team at Affirm, you will be joining a team of fun, passionate and highly skilled individuals who like solving security challenges and enjoy learning new skills. We partner together with a team first mindset and are keen on redefining security in the fintech space. 

We are looking for an intern who will be primarily supporting the Enterprise Security team and will work on meaningful projects that will help enhance Affirm’s security posture. The Enterprise Security program’s main mission is to protect our brand, employees, infrastructure and intellectual property while enabling rapid business execution. Through this role, you will have the opportunity to learn and contribute to enhancing our preventive, detective and responsive security controls against information security threats. 

• We're excited to launch this brand new hybrid office Intern program for computer science or related majors. The program will kick off in May/June 2024.
• You will work out of the San Francisco office and participate in our direct mentorship program. 
• This program requires you to work out of the office for three days a week—Tuesday, Wednesday, and Thursday—to collaborate with your team, early career Affirmers, and your mentor. You'll experience the best of both worlds: the in-office experience and remote work. 
• You'll be paired with a mentor who you'll work alongside and meet with weekly.

What You'll Do

• Partner with security engineers across the following four functions within the Enterprise Security team - Corporate Security, Identity & Access Management (IAM), Platform Security & Security Operations. 
• You will get to contribute to projects in areas including but not limited to: 
• Tuning tools to improve our Data Loss Prevention (DLP) classification 
• Enhancing our Vulnerability Management Program 
• Developing automations to improve operations workflows 
• Working on engineering projects to grow our logging & detection program
• Improving Incident Response Processes & Procedures 
• Applying IAM controls across a variety of users, applications and services 
• Collaborate with cross functional Security teams such as Product Security & Security Risk Management to learn about their functions as well. 
• We pair interns with a dedicated mentor who will be by your side to give advice and ensure the success of your project. Expect to meet with them on a regular basis and receive feedback.
• There are opportunities to attend events with other interns and full-time Affirmers! Past events have included virtual cooking classes, executive fireside chats, Hackathons, etc. 
• Interns present their work to the entire engineering organization at the end of the internship.

What We Look For:

• Strong ethical and discretionary ability to handle sensitive information and data. 
• Curious and motivated learner: University enrolled student who has experience or interest in information security. 
• Ability to collaborate with other team members and open to receiving feedback. 
• Good communication skills with an interest in learning to communicate security issues to a range of audience. 
• Analyze information and evaluate results to choose the best solution to effectively solve challenges. 
• Experience with Python or similar language to help develop API integrations. 
• Some knowledge of cloud security fundamentals is preferred (AWS or similar). 

Compensation is a set amount for the Intern role with no range.

USA hourly base pay: $55.00

USA monthly base pay: $9,500