Affirm - Senior Manager, Security Incident Response

• Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review. • Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity. • Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business. • Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions. • Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness. • Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards. • Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action. • What we look for • What we look for • 10+ years of experience in security operations, incident response, or a related security field. • Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery. • Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have. • Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements. • Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR. • Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners. • Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results. • An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards. • Pay Grade - REquity Grade - 15Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)USA base pay range (CA, WA, NY, NJ, CT) per year: $265,000 - 325,000USA base pay range (all other U.S. states) per year: $236,000 - 296,000#LI-Remote • Employees new to Affirm typically come in at the start of the pay range • Remote-first with flexibility built inAffirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. • Remote-first with flexibility built in • Benefits designed for youOur benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: