Senior Manager, Security Incident Response

Affirm

5d • $236,000 - $325,000 • Remote

About The Position

Affirm is seeking an experienced security leader to lead its global security investigations and incident response program as the company expands internationally. The role guides complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to provide consistent response across regions and scale with the business.

The leader will manage a technically deep, engineering-oriented team responsible for major incidents and improving response capabilities. They will direct complex investigations while staying close to technical work, help responders and executives make critical decisions, and convert incident findings into durable engineering improvements. The role also shapes AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and appropriate security, privacy, and operational safeguards.

Affirm is a remote-first company; most roles can be performed from almost anywhere within the country of employment. Some roles may occasionally require in-person office work, and all new hires are invited to an in-person onboarding experience. Compensation includes an annual base salary range that varies by U.S. location, and the total compensation package may include equity rewards, monthly stipends, and benefits.

Requirements

• 10 or more years of experience in security operations, incident response, or a related security field.
• Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.
• Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments.
• Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.
• Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.
• Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.
• Ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.
• An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.

Nice To Haves

• Experience in fintech or payments.
• Familiarity with using threat intelligence to inform response.

Responsibilities

• Lead security incidents and investigations throughout their lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
• Serve as incident commander for major security events, establish clear roles and decision paths, and coordinate large technical and cross-functional response groups.
• Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.
• Manage and develop a technical, engineering-oriented response team; set priorities, coach engineers, and build incident command depth and consistent execution across regions.
• Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
• Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows with appropriate human oversight and security, privacy, and operational safeguards.
• Translate complex security and incident metrics into executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.

Benefits

• 100% subsidized medical coverage for employees and their dependents.
• Dental and vision coverage for employees and their dependents.
• Monthly stipends for technology setup and health and wellness options.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan allowing employees to buy Affirm stock at a discount.
• Equity rewards may be included in the total compensation package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed