Global Security Incident Response Lead (Remote)

Affirm, Inc.; Halifax; Remote; CAD 209,000 - 269,000; Full time

Benefits offered by this job

Health coverage

Tech stipends

Flexible time off

ESPP

Job summary

Affirm, Inc. is seeking an experienced security leader to run global investigations and the incident‑response program as we scale internationally.

You will guide complex incidents, build readiness, and advance engineering capabilities across regions with an engineering‑heavy, AI‑enabled approach. You will lead a technical, on‑call oriented team, drive durable improvements, and report security metrics to executives.

Qualifications

• 10+ years of experience in security operations, incident response, or a related security field.
• Proven ability to lead major security incidents and investigations in technology‑driven, cloud‑native environments.
• Strong technical foundation in security operations, with depth in investigations, incident response, detection, root‑cause analysis, and/or digital forensics across cloud and enterprise environments.

Responsibilities

• Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post‑incident review.
• Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross‑functional response groups through ambiguity.
• Guide technical investigations and root‑cause analyses with engineering teams, validate fixes, and drive durable corrective actions.
• Manage and develop a technical, engineering‑oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.
• Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on‑call readiness, postmortems, and measures of response effectiveness.
• Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.
• Translate complex security and incident metrics into actionable executive dashboards and board‑level risk reporting, surfacing trends and remediation priorities that drive cross‑functional action.

Skills

Security leadership

Incident response

Cloud security

Threat intel

Team management

SIEM/EDR/SOAR

Executive comms

AI in security

Root cause analysis

Security governance

Tools

SIEM

EDR

SOAR

Job description

Affirm, Inc. is seeking an experienced security leader to run global investigations and the incident‑response program as we scale internationally.

You will guide complex incidents, build readiness, and advance engineering capabilities across regions with an engineering‑heavy, AI‑enabled approach. You will lead a technical, on‑call oriented team, drive durable improvements, and report security metrics to executives.