Remote Senior Security Incident Response Leader

Affirm, Inc.; United States; Remote; USD 236,000 - 325,000; Full time

Benefits offered by this job

Health coverage at no cost

Spending stipends

Time off to recharge

ESPP

Job summary

affirm is seeking a Senior Manager, Security Incident Response to lead our global investigations and incident-response program from a remote US basis. You will guide complex incidents, build readiness, and scale capabilities across regions while advancing AI-enabled workflows with human oversight.

With 10+ years in security operations and a track record of driving durable engineering improvements, you will shape incident response practices, reporting, and cross-functional collaboration to

Qualifications

• 10+ years in security operations, incident response, or a related security field.
• Proven ability to lead major security incidents and investigations in tech-driven, cloud-native environments.
• Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics.

Responsibilities

• Lead security incidents and investigations across the full lifecycle from assessment through containment, remediation, recovery and post-incident review.
• Serve as incident commander for major security events with clear roles and decision paths.
• Guide technical investigations and root-cause analyses with engineering teams to drive durable fixes.

Skills

Security leadership

Incident response

Cloud security

AI in security

Team coaching

Tools

SIEM

EDR

SOAR

Job description

affirm is seeking a Senior Manager, Security Incident Response to lead our global investigations and incident-response program from a remote US basis. You will guide complex incidents, build readiness, and scale capabilities across regions while advancing AI-enabled workflows with human oversight.

With 10+ years in security operations and a track record of driving durable engineering improvements, you will shape incident response practices, reporting, and cross-functional collaboration to