Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI-enabled security capabilities for fintech payments.
Responsibilities
Lead security incidents and investigations through assessment, containment, remediation, recovery, and post-incident review
Serve as incident commander for major security events and coordinate technical and cross-functional response groups
Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive corrective actions
Manage and develop a technical, engineering-oriented response team
Set global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and response-effectiveness measures
Improve response tooling, security telemetry, detection, and automation, including agentic AI workflows with human oversight and security and privacy safeguards
Translate security and incident metrics into executive dashboards and board-level risk reporting
Requirements
10+ years of experience in security operations, incident response, or a related security field
Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments
Strong technical foundation in security operations, investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments
Experience managing and developing technical or engineering teams
Experience building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR
Excellent written and verbal communication, including executive updates and board-level reporting
Ability to independently advance ambiguous work, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion
AI-forward mindset and judgment applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate safeguards
Benefits
100% subsidized medical coverage for employees and dependents
Dental and vision coverage for employees and dependents
Monthly stipends for health, wellness, and tech spending
Flexible time off
Generous holiday calendars
Employee stock purchase plan (ESPP) with discounted Affirm stock
Remote-first work flexibility
In-person onboarding experience
Inclusive interview process and disability accommodations
Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
Staff Security Operations Specialist building AI - powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.