Senior Insider Threat Engineer (Remote)

Affirm, Inc.; California; Híbrido; USD 109.000 - 151.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health coverage for you and dependents

Monthly tech setup stipends

Flexible time off and holiday calendar

Employee stock purchase plan (ESPP)

Descripción de la vacante

affirm is a remote-first company building an insider threat program to protect its systems and data. You will design controls, detection use cases, and investigative practices, partnering with Legal, HR, Privacy, and Compliance to keep the program effective and trusted by affirmers.

You will lead workstreams from design to day-to-day operation, develop playbooks and metrics, and automate evidence collection and reporting with Python and automation platforms, while ensuring human review where

Formación

• Deep expertise in security engineering, security operations, insider risk, or digital forensics.
• Experience running investigations end to end with evidence handling and forensics.
• Experience in regulated or financial services environments is a plus.
• Ability to write and evaluate detection logic against telemetry in a SIEM.
• Strong discretion and ability to handle sensitive investigations with privacy considerations.

Responsabilidades

• Lead the build-out of insider threat workstreams from design to day-to-day operation.
• Develop operating mechanics, playbooks, metrics and reporting for the program.
• Support insider risk investigations with telemetry and evidence analysis.
• Partner with Legal, HR, Privacy, and Compliance on case handling and escalation.
• Threat model high-risk data and turn results into production detections.
• Automate operations with workflow platforms and Python for evidence collection and reporting.
• Define which decisions stay with a human in agentic automations.

Conocimientos

Security engineering

Insider risk

Investigation skills

Python for security

Automation workflows

Communication

Privacy and compliance awareness

Written findings

Herramientas

Splunk

Elastic

Panther

Chronicle

Tines

Torq

DLP

Descripción del empleo

affirm is a remote-first company building an insider threat program to protect its systems and data. You will design controls, detection use cases, and investigative practices, partnering with Legal, HR, Privacy, and Compliance to keep the program effective and trusted by affirmers.

You will lead workstreams from design to day-to-day operation, develop playbooks and metrics, and automate evidence collection and reporting with Python and automation platforms, while ensuring human review where