Senior Security Operations Engineer driving security incident response efforts for Affirm's systems and customers. Collaborating with teams to improve security posture and build automated playbooks.
Responsibilities
Lead security incidents end-to-end, from detection and triage through containment, remediation, and post-incident review.
Act as incident commander, driving clear decisions and alignment across teams during high-pressure situations.
Conduct hands-on investigations across cloud and endpoint environments to determine root cause and impact.
Partner with Observability & Automation to improve detections, reduce noise, and build automated response playbooks.
Contribute to and refine incident response playbooks, runbooks, and documentation to improve readiness and consistency.
Collaborate with Security, Infrastructure, and Product teams to identify gaps and strengthen the incident response lifecycle.
Communicate effectively during incidents, providing clear updates to both technical and non-technical stakeholders.
Requirements
5+ years of experience in Security Operations or Detection & Response, with strong hands-on incident response in cloud environments (AWS and EKS experience strongly preferred).
Proven ability to lead security incidents, including containment and remediation, in fast-moving environments.
Strong investigative and analytical skills, with the ability to synthesize signals from multiple data sources.
Experience with security tooling such as SIEM and EDR platforms (e.g., Splunk, Elastic, SentinelOne, CrowdStrike, or similar).
Solid understanding of cloud security concepts and their application in real-world scenarios.
Strong communication skills, with the ability to clearly convey information across technical and non-technical audiences.
Experience building or improving automation for incident response workflows (e.g., scripting in Python; infrastructure-as-code is a plus).
Benefits
Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount
IT Systems Administrator securing cloud, hardware, and network assets for an Alberta resource and environmental services group. Managing cybersecurity, infrastructure, procurement, and end - user support.
Cyber Defender protecting Ontinue’s AI - powered MXDR customers through SOC threat detection and response. Investigating threats across identity, endpoint, network, and cloud environments.
Security Operations Team Lead building Safe Software’s cybersecurity operations for FME, its enterprise data integration platform. Leading incident response, security tooling, compliance, and team growth.
SOC analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Investigating escalated alerts and improving 24×7 security operations.
SOC cybersecurity analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Improving 24×7 detection, investigation, and incident response capabilities.
Senior Security Operations Engineer monitoring incidents and leading forensics for Samsara’s IoT - connected operations platform. Building security automation and supporting insider - threat investigations.
Senior SOC analyst leading threat detection, investigations, and incident response for Financeit, a Canadian point - of - sale financing provider. Building its new SOC’s automation, AI - threat coverage, and operational standards.