Senior Manager, Security Incident Response
Affirm · Remote US
About this role
**Senior Manager, Security Incident Response** **About the InfoSec team** At Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset. **About the role** We’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. You’ll guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business. In this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows (including agentic approaches to evidence gathering, analysis, and coordination) with human oversight and clear security, privacy, and operational safeguards. **What you’ll do** - Lead security incidents and investigations across the full lifecycle: initial assessment → containment → remediation → recovery → post-incident review. - Serve as incident commander for major security events; set clear roles and decision paths; coordinate large technical and cross-functional response groups through ambiguity. - Guide technical investigations and root-cause analyses with engineering teams; validate fixes; drive durable corrective actions across the business. - Manage and develop a technical, engineering-oriented response team; set priorities; coach engineers; build incident command depth and consistent execution across regions. - Set operating objectives and global readiness practices (playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness). - Drive engineering improvements to response tooling, security telemetry, detection, and automation—including agentic AI workflows with appropriate human oversight and security/privacy safeguards. - Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities for cross-functional action. **What we look for** - 10+ years of experience in security operations, incident response, or a related security field. - Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments (detection/assessment through containment, remediation, and recovery). - Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Fintech/payments experience and familiarity with threat intelligence are nice to have. - Experience managing and developing technical/engineering teams; setting direction and prio
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.