Senior Manager, Security Incident Response (Fintech)

Location: Remote US; Remote Canada is also listed as an available location. The role is remote-first, with occasional in-person work possible and in-person onboarding for all new hires.

Salary: USA base pay is $265,000–$325,000 per year in CA, WA, NY, NJ, and CT, or $236,000–$296,000 per year in other US states.

Company

Affirm builds transparent fintech products that let people pay over time without hidden fees or surprises.

What you will do

• Lead security incidents and investigations through assessment, containment, remediation, recovery, and post-incident review.
• Act as incident commander for major events, defining roles and decision paths while coordinating technical and cross-functional responders.
• Guide technical investigations and root-cause analyses, validate fixes, and drive durable corrective actions with engineering teams.
• Manage and develop an engineering-oriented response team, setting priorities, coaching engineers, and building consistent execution across regions.
• Establish global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and effectiveness metrics.
• Improve response tooling, telemetry, detection, automation, and AI-enabled investigation workflows, and provide executive dashboards and board-level risk reporting.

Requirements

• 10+ years of experience in security operations, incident response, or a related security field.
• Experience leading major security incidents and investigations in technology-driven, cloud-native environments from detection through recovery.
• Strong technical foundation in security operations, including investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments.
• Experience managing and developing technical or engineering teams, setting direction, coaching engineers, and guiding hands-on incident work.
• Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling.
• Excellent written and verbal communication, including executive updates, board-level reporting, and cross-functional alignment.
• Ability to move ambiguous work forward independently, make sound decisions with incomplete information, and complete investigations, remediation, and program improvements with measurable results.
• AI-forward mindset and sound judgment when applying AI to security operations, including agentic investigation or automation workflows with appropriate human oversight and security, privacy, and operational safeguards.

Nice to have

• Experience in fintech or payments.
• Familiarity with using threat intelligence to inform response.

Culture & Benefits

• Remote-first work with flexibility within the country of employment.
• 100% subsidized medical, dental, and vision coverage for employees and dependents.
• Monthly technology, health, and wellness spending stipends.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan with discounted Affirm stock.
• Inclusive interview process with accommodations available for candidates with disabilities.