{"id":3536659,"url":"https://alion.io/job/affirm-senior-manager-security-incident-response","title":"Senior Manager, Security Incident Response","company":{"id":572,"name":"Affirm","domain":"affirm.com","url":"https://alion.io/company/affirm","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":8,"ghost_share":0,"stale_share":0.375,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":{"min":209000,"max":269000,"currency":"CAD","period":"year","gross":null,"usd_annual":193051},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-30T14:12:13Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-09T16:02:07Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"At Affirm, we exist for the moments that matter-giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.\nAbout the InfoSec team\nAt Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.\nAbout the role\nWe’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business.\nIn this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards.\nWhat you’ll do\nLead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.\n\nServe as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity.\n\nGuide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.\n\nManage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.\n\nSet operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.\n\nDrive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.\n\nTranslate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.\n\nWhat we look for\n10+ years of experience in security operations, incident response, or a related security field.\n\nProven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.\n\nStrong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.\n\nExperience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.\n\nTrack record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.\n\nExcellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.\n\nDemonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.\n\nAn AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.\n\nPay Grade - R\nEquity Grade - 9\nEmployees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. \nBase pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).\nCAN base pay range per year: $209,000 - 269,000\nLocation - Remote Canada\nThis remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.\n#LI Remote\nRemote-first with flexibility built in\n Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.\nBenefits designed for you \n Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:\nHealth coverage at no cost: We cover 100% of premiums for employees and their dependents.\nSpending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.\nTime off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.\nOwn a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.\nWe’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.\nFor positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.\nBy clicking \"Submit Application,\" you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.","description_format":"text","description_chars":7035,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-30T17:51:10Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Positions approved through LMIA in 12 months: 5","filings_12m":5,"filings_prev_12m":0,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":9,"expected_fill_days":67,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":193051,"is_top_pay":true},"html_url":"https://alion.io/job/affirm-senior-manager-security-incident-response","json_url":"https://alion.io/job/affirm-senior-manager-security-incident-response.json","meta":{"generated_at":"2026-11-09T19:43:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5934,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":572},"rest":"https://alion.io/mcp/rest/get_company?id=572"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faffirm-senior-manager-security-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faffirm-senior-manager-security-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faffirm-senior-manager-security-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/affirm-senior-manager-security-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faffirm-senior-manager-security-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3536659}},{"tool":"search_jobs","arguments":{"company":"affirm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3536659},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}