Staff Security Operations Engineer, Observability & Automation Engineering

Affirm; Denver (CO); Remote; USD 90,000 - 150,000; Full time

Job summary

An innovative company is seeking a Staff Security Operations Engineer to enhance its Logging, Detection, and Response programs. In this pivotal role, you'll collaborate with skilled professionals to tackle security challenges in the fintech sector. Your expertise in cloud environments and security tooling will be crucial as you lead projects that redefine security practices. This position offers the opportunity to work remotely within the US, providing competitive pay and benefits while contributing to a culture of inclusivity and continuous learning.

Qualifications

• 5+ years in Security Operations with a focus on engineering.
• Hands-on experience in investigation and remediation.

Responsibilities

• Lead and mature the Logging & Detection Engineering program.
• Develop incident response playbooks and processes.

Skills

Security Operations

Cloud Experience (AWS)

Data Ingestion and Normalization

Automation Scripting (Python)

Communication Skills

Tools

Elastic

Splunk

Hive

Crowdstrike Falcon

Kubernetes

Terraform

Job description

Staff Security Operations Engineer, Observability & Automation Engineering

Join to apply for the Staff Security Operations Engineer, Observability & Automation Engineering role at Affirm.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or interest. Security is vital to our success. Our Security Operations (Sec Ops) program is key to protecting assets through preventive and responsive security practices.

As part of the Security Team, you'll work with passionate, skilled individuals solving security challenges and learning new skills. We aim to redefine security in fintech.

We're seeking a Staff Security Operations Engineer to develop our Logging, Detection, and Response programs. This hands-on role requires cloud environment experience, participation in on-call duties, and serving as an engineering escalation point. Collaboration with internal and external teams to enhance security capabilities is essential.

Responsibilities

• Lead and mature our Logging & Detection Engineering program.
• Improve our logging pipeline to increase visibility.
• Develop advanced detections based on frameworks like MITRE ATT&CK.
• Optimize detection fidelity by tuning signals.
• Build and maintain security tooling.
• Drive incident detection, response, and remediation.
• Serve as escalation point for investigations and incidents.
• Automate workflows between security tools.
• Develop incident response playbooks and processes.
• Lead security projects across teams.

Requirements

• 5+ years in Security Operations with engineering focus, cloud experience (AWS or similar).
• Experience with data ingestion and normalization for monitoring.
• Hands-on in investigation, containment, remediation, and partnering with infrastructure teams.
• Experience with tools like Elastic, Splunk, Hive, Crowdstrike Falcon.
• Experience with Kubernetes or similar container orchestration.
• Proficiency in automation scripting (Python preferred).
• Knowledge of Infrastructure-as-code (Terraform).
• Strong communication skills for technical and non-technical audiences.
• Ability to lead projects and collaborate across teams.
• Bonus: Threat intelligence and hunting experience.

Additional Details

Position is remote within the US, with competitive pay, benefits, and equity options. Affirm supports an inclusive hiring process and provides accommodations as needed.