Senior Manager, Security Incident Response

Leads Affirm's global security investigations and incident response programme within its Security Operations and Resilience Engineering group, working remotely in the US as the company expands internationally. The senior manager runs a technical, engineering-minded response team and directs complex investigations while staying close to the hands-on work.

The role handles incidents across their whole life, from first assessment through containment, recovery and post-incident review, and acts as incident commander for major events, assigning roles and steering large technical and cross-functional groups. It guides root-cause analysis with engineering teams and makes sure fixes last, builds global readiness through playbooks, escalation paths, exercises, on-call practice and postmortems, and improves response tooling, telemetry, detection and automation, including agent-assisted investigation with human oversight and privacy safeguards. Turning incident data into executive dashboards and board-level risk reporting is part of the job, as is coaching engineers and building incident command depth across regions.

Affirm asks for ten years in security operations or incident response, a record of leading major incidents in cloud-native environments, and deep technical grounding in investigations, detection, forensics and root-cause analysis. Experience managing engineering teams, building scalable response practices with SIEM, EDR or SOAR, and clear executive communication is expected. Fintech or payments background and threat intelligence experience are a plus.