Senior Product Security Engineer (Insider Threat)

Location: Remote Canada; candidates must reside in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.

Base pay: $153,000–$213,000 CAD per year.

Company

Affirm provides clear, predictable payment-over-time solutions with no hidden fees.

What you will do

• Build and operate insider threat workstreams, including investigative standards, playbooks, metrics, and reporting.
• Support insider risk investigations with evidence analysis, endpoint and log forensics, timeline reconstruction, written findings, and risk recommendations.
• Partner with Legal, HR/Employee Relations, Privacy, and Compliance on case handling, escalation criteria, privacy, and regulatory obligations.
• Threat model high-risk data and systems and turn findings into production detections with detection engineers.
• Own controls including DLP, endpoint monitoring, secure browser and contractor access controls, SaaS posture management, and access governance.
• Automate evidence collection, case routing, reporting, triage, and investigation using Python, workflow platforms, and agentic automations.

Requirements

• Deep expertise in security engineering, security operations, insider risk, or digital forensics.
• Experience standing up new security capabilities where little previously existed.
• End-to-end investigation experience, including evidence handling, log and endpoint forensics, timeline reconstruction, and written findings for Legal and HR audiences.
• Ability to write and evaluate detection logic against endpoint, identity, cloud, and SaaS telemetry in a SIEM such as Splunk, Elastic, Panther, or Chronicle.
• Hands-on experience with DLP, UEBA, endpoint detection and response, CASB, and access governance tooling.
• Working knowledge of Python for security tooling and automation.
• Experience building and maintaining production workflows in Tines, Torq, or similar automation platforms.
• Experience building and running production agentic automations for alert triage and investigation, with clear human-review boundaries.
• Discretion, sound judgment, and strong written and verbal communication across Security, Engineering, Legal, HR, Privacy, and Compliance.

Nice to have

• Experience in regulated or financial services environments, including SOC 2, PCI DSS, or GLBA.

Culture & Benefits

• Remote-first work with flexibility within the country of employment; occasional office work and in-person onboarding may apply.
• Health coverage with 100% of premiums covered for employees and dependents.
• Monthly technology, health, and wellness stipends.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan with discounted Affirm stock.
• Inclusive interview process with accommodations available for candidates with disabilities.