Sr. Security Operations Engineer, Incident Response

Affirm

🔍 Observed

Remote Canada First seen 1 day, 2 hours ago Last seen 2 hours, 37 minutes ago Greenhouse

Apply on Greenhouse Search Google for This Role

ATS links often expire — Google search finds the latest posting

Job Description

AI Summary

• Lead end-to-end incident response efforts for a fintech company, from detection and triage through remediation, acting as incident commander during high-pressure situations • Conduct hands-on investigations across cloud and endpoint environments, partnering with observability and automation teams to improve detections and build automated response playbooks • Requires 5+ years of Security Operations or Detection & Response experience with demonstrated technical depth in incident investigation and response execution • Based in Canada with requirement to work Pacific Time Zone hours to support current team operations coverage • Join Affirm's Security Operations & Resilience team protecting millions of customers and partners in the fintech sector with a collaborative, innovation-focused culture

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

At Affirm, Security is integral to our mission of building honest financial products and driving the company's long-term success. The Security Operations and Resilience Engineering (SOR) program serves as the foundation of our preventive and responsive efforts to safeguard Affirm's assets and infrastructure. As part of our Security Team, you'll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.

We're seeking a Senior Security Operations Engineer to join the Incident Response function within the broader Security Operations & Resilience org. In this role, you'll be a hands-on practitioner and technical contributor who drives incident response efforts from triage through resolution - with the depth, ownership, and composure to lead when it matters most.

This is a highly technical, execution-focused role where you’ll lead hands-on investigations and drive incident response from detection through remediation. You’ll collaborate across engineering, product, and infrastructure teams, and partner with Observability & Automation to improve detections, build automated playbooks, and strengthen our security posture. You will have the opportunity to help solve complex security challenges and build capabilities that protect millions of customers, merchants, and partners.

Note: This role is based in Canada and requires alignment with Pacific Time Zone working hours to support the current team’s operations coverage. Candidates must be able to reliably work Pacific Time hours.

What you’ll do

You will lead and execute incident response efforts to protect Affirm’s systems, customers, and data.

Lead security incidents end-to-end, from detection and triage through containment, remediation, and post-incident review.
Act as incident commander, driving clear decisions and alignment across teams during high-pressure situations.
Conduct hands-on investigations across cloud and endpoint environments to determine root cause and impact.
Partner with Observability & Automation to improve detections, reduce noise, and build automated response playbooks.
Contribute to and refine incident response playbooks, runbooks, and documentation to improve readiness and consistency.
Collaborate with Security, Infrastructure, and Product teams to identify gaps and strengthen the incident response lifecycle.
Communicate effectively during incidents, providing clear updates to both technical and non-technical stakeholders.

What we look for

We’re looking for a hands-on security engineer who can lead through ambiguity and drive effective incident response outcomes.

5+ years of experience in Security Operations or Detection & Response, with strong hands-on incident response in cloud environments (AWS and EKS experience strongly preferred).
Proven ability to lead security incidents, including containment and remediation, in fast-moving environments.
Strong investigative and analytical skills, with the ability to synthesize signals from multiple data sources.
Experience with security tooling such as SIEM and EDR platforms (e.g., Splunk, Elastic, SentinelOne, CrowdStrike, or similar).
Solid understanding of cloud security concepts and their application in real-world scenarios.
Strong communication skills, with the ability to clearly convey information across technical and non-technical audiences.
Experience building or improving automation for incident response workflows (e.g., scripting in Python; infrastructure-as-code is a plus).

Location - Remote CAN

Pay Grade - N
Equity Grade - 6

Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, which includes the annual base pay and the sales incentive target.

Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).

Base pay range per year: $150,000 - $200,000 CAD

#LI-Remote

Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.

We’re extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:

Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.

By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.

Skills

python aws

Quick Actions

Apply Externally Search Google Back to Jobs

Job Information

Company:
Affirm
Location:
Remote Canada
Job Type:
Full-Time
Work Location:
Remote
Experience Level:
Senior
Source:
Greenhouse
Status:
Active

Activity Score

86 /100

Very Active (86)

Higher scores indicate more likely active hiring based on listing freshness, company activity, and other signals. Learn more →