Senior Insider Threat Security Engineer

Affirm, Inc.; San Juan de Terranova; Remote; CAD 153,000 - 213,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Tech/Wellness stipends

Flexible time off

Job summary

affirms is a remote-first company seeking an experienced InfoSec professional to mature the insider threat program. You will build controls, detections, and investigative practices, and partner with Legal, HR, Privacy, and Compliance to keep the program effective and trusted by affimers.

You will lead risk investigations, model data, and translate findings into production detections while owning automation and agentic tooling. This role is Canada-based with a remote-first setup.

Qualifications

• Experience in security engineering, operations, insider risk, or digital forensics.
• Proven track record standing up new security capabilities.
• Experience running investigations end-to-end with evidence handling and log forensics.
• Ability to write and evaluate detection logic against telemetry in a SIEM.
• Hands-on with insider risk tooling such as DLP, UEBA, EDR, CASB, and access governance.
• Working knowledge of Python for security tooling and automation.
• Experience building production workflows in automation platforms like Tines or Torq.
• Experience automating agentic triage and investigation with human-in-the-loop concepts.
• Strong communication across Security, Engineering, Legal, HR, Privacy, and Compliance.

Responsibilities

• Lead build-out of insider threat workstreams from design to day-to-day operations.
• Develop operating mechanics, playbooks, and metrics/reporting for the program.
• Support insider risk investigations with telemetry analysis and evidence.
• Collaborate with Legal, HR, Privacy, and Compliance on case handling and escalation.
• Threat model data/systems and translate results into production detections.
• Own and improve controls reducing insider risk (DLP, EDR, access governance).
• Automate workflow load with platforms and Python.
• Expand agentic automations for triage and investigation.

Skills

Insider risk

Security engineering

Security operations

Digital forensics

Investigations

Evidence handling

SIEM experience

Python for security

Endpoint detection

Automation platforms

Tines

LLM triage

Tools

DLP

UEBA

EDR

CASB

Access governance

Job description

affirms is a remote-first company seeking an experienced InfoSec professional to mature the insider threat program. You will build controls, detections, and investigative practices, and partner with Legal, HR, Privacy, and Compliance to keep the program effective and trusted by affimers.

You will lead risk investigations, model data, and translate findings into production detections while owning automation and agentic tooling. This role is Canada-based with a remote-first setup.