Senior Manager, Security Incident Response

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.

About the InfoSec team

• At Affirm, security is integral to our mission of building honest financial products and driving the company's long-term success.
• The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm's assets and enterprise security ecosystem.
• As part of our Security Team, you'll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.

About the role

• We're seeking an experienced security leader to lead Affirm's global security investigations and incident response program as we expand internationally.
• This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business.
• In this role, you'll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities.
• You'll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements.
• You'll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards.

What you'll do

• Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
• Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity.
• Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.
• Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.
• Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
• Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.
• Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.

What we look for

• 10+ years of experience in security operations, incident response, or a related security field.
• Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.
• Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.
• Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.
• Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.
• Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.
• Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.
• An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.

Pay Grade - R

Equity Grade - 15

• Employees new to Affirm typically come in at the start of the pay range .
• Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
• Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
• USA base pay range (CA, WA, NY, NJ, CT) per year: $ 265,000 - 325,000
• USA base pay range (all other U.S. states) per year: $ 236,000 - 296,000

#LI-Remote

Remote-first with flexibility built in

• Affirm is proud to be a remote-first company.
• Most roles can be done from almost anywhere within the country of employment.
• Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work.
• All new hires will be invited to attend an in-person onboarding experience.

Benefits

designed for you

Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.

• We're committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we're happy to help.
• For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
• By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.