Insider Threat Security Engineer — Detection & Investigations

Affirm, Inc.; United States; Remote; USD 109,000 - 151,000; Full time

Benefits offered by this job

Health coverage

Tech stipends

Generous time off

Employee stock purchase plan (ESPP)

Job summary

Affirm, Inc. is seeking a senior security professional to mature our insider threat program. You will build controls, develop detection use cases, and establish investigative practices aligned with Legal, HR, Privacy, and Compliance to ensure trust and compliance across the org.

You will lead risk investigations, model data for high‑risk assets, and collaborate with cross‑functional teams on escalation criteria while improving automation to reduce manual workload.

Qualifications

• Deep expertise in security engineering, security operations, insider risk, or digital forensics.
• Track record of standing up new security capabilities where little existed before.
• Experience running investigations end to end, including evidence handling and timeline reconstruction.
• Hands‑on insider risk tooling experience (DLP, UEBA, EDR, CASB, access governance).

Responsibilities

• Lead the build‑out of insider threat workstreams from design to day‑to‑day operation.
• Define investigative standards, playbooks, metrics, and reporting.
• Support insider risk investigations with telemetry and evidence analysis.
• Collaborate with Legal, HR, Privacy, and Compliance on case handling and escalation criteria.
• Model data and systems for insider risk and translate findings into detections.
• Improve controls to reduce insider risk (DLP, EDR, access governance).
• Automate workflows and evidence collection using Python and automation platforms.
• Develop agentic automations for triage and investigation with human review boundaries.

Skills

Insider risk

Security engineering

Incident response

Digital forensics

Python

SIEM

Automation

Regulatory experience

Tools

DLP

UEBA

EDR

CASB

Tines

Torq

LLM tooling

Job description

Affirm, Inc. is seeking a senior security professional to mature our insider threat program. You will build controls, develop detection use cases, and establish investigative practices aligned with Legal, HR, Privacy, and Compliance to ensure trust and compliance across the org.

You will lead risk investigations, model data for high‑risk assets, and collaborate with cross‑functional teams on escalation criteria while improving automation to reduce manual workload.