Staff Product Security Operations Engineer, Incident Response Lead

Affirm; Dallas (TX); Remote; USD 120,000 - 160,000; Full time

Job summary

An innovative firm is seeking a passionate Staff Product Security Operations Engineer to lead Incident Response efforts. This pivotal role involves owning the Security Incident Response Program, leading detection and response initiatives, and collaborating across teams to enhance security capabilities. With a focus on strategic thinking and technical expertise, you will protect millions of users by developing incident response playbooks and mentoring junior staff. Join a company that values diversity and offers a remote-first work environment, competitive pay, and comprehensive benefits.

Qualifications

• 7+ years of experience in leading security incidents and detection.
• Strong communication and stakeholder engagement skills are essential.

Responsibilities

• Own and drive the Security Incident Response Program.
• Lead detection and response efforts, managing all incident phases.
• Mentor and train junior security staff.

Skills

Detection and Response engineering

Cloud environments (AWS, EKS)

Communication skills

Sec Ops tools (Splunk, Elastic, CrowdStrike)

Programming (Python, Terraform)

Threat intelligence and hunting programs

Tools

Splunk

Elastic

CrowdStrike

Job description

Staff Product Security Operations Engineer, Incident Response Lead

Join to apply for the Staff Product Security Operations Engineer, Incident Response Lead role at Affirm

Job Overview

Affirm is reinventing credit to make it more honest and friendly, providing consumers the flexibility to buy now and pay later without hidden fees or interest. Security is vital to our success; our Security Operations and Resilience Engineering (Sec Ops) program underpins our preventive and responsive security practices to safeguard assets. We seek a passionate, skilled Security Engineer to lead Incident Response, acting as Incident Commander during security events, making decisions amid ambiguity, and collaborating across teams to enhance security capabilities. This role involves leadership, strategic thinking, stakeholder engagement, and technical expertise to protect millions of users and partners.

Responsibilities

1. Own and drive the Security Incident Response Program.
2. Lead detection and response efforts, managing all incident phases.
3. Serve as incident commander during security crises.
4. Assist with investigations as the senior escalation point.
5. Balance tactical and strategic responses using clear communication.
6. Provide briefings and updates to technical and executive audiences.
7. Develop incident response playbooks and processes.
8. Contribute to monitoring, detection, and response engineering projects.
9. Create advanced detections based on frameworks like MITRE ATT&CK.
10. Collaborate on security projects across teams.
11. Mentor and train junior security staff.

Qualifications

• 7+ years in Detection and Response engineering, leading security incidents.
• Experience with cloud environments (AWS, EKS preferred).
• Strong communication and stakeholder engagement skills.
• Proficiency with Sec Ops tools (Splunk, Elastic, CrowdStrike, etc.).
• Programming skills in Python and Terraform for automation.
• Ability to lead projects and partner with legal/compliance teams.
• Experience in threat intelligence and hunting programs is a plus.

Additional Information

We encourage applicants who meet most requirements and believe in our mission. Affirm values diversity and inclusion, offering competitive pay, equity, benefits, and a remote-first work environment within the US. Learn more about our benefits and application process on our website.