Senior Security Operations Engineer, Incident Response

🕒 May 7

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Affirm

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💳 Fintech

👥 B2C

🛍️ eCommerce

💰 Post-IPO Equity on 2021-01

Fintech • B2C • eCommerce

Affirm is a financial technology company that offers a 'Buy Now, Pay Later' service, allowing consumers to make purchases and pay for them over time with flexible payment plans. Affirm eliminates hidden fees and compound interest, providing clear terms and conditions for its users. The company also offers the Affirm Card, a debit card that allows users to request to pay over time for larger purchases or pay in full for smaller ones. Affirm partners with various retailers across multiple categories, including electronics, apparel, and travel, providing customers with the convenience of paying over time at checkout both online and in physical stores. Affirm's services are integrated with Apple Pay, enabling customers to make payments seamlessly from their iPhone or iPad.

📋 Description

• Lead security incidents end-to-end, from detection and triage through containment, remediation, and post-incident review. • Act as incident commander, driving clear decisions and alignment across teams during high-pressure situations. • Conduct hands-on investigations across cloud and endpoint environments to determine root cause and impact. • Partner with Observability & Automation to improve detections, reduce noise, and build automated response playbooks. • Contribute to and refine incident response playbooks, runbooks, and documentation to improve readiness and consistency. • Collaborate with Security, Infrastructure, and Product teams to identify gaps and strengthen the incident response lifecycle. • Communicate effectively during incidents, providing clear updates to both technical and non-technical stakeholders.

🎯 Requirements

• 5+ years of experience in Security Operations or Detection & Response, with strong hands-on incident response in cloud environments (AWS and EKS experience strongly preferred). • Proven ability to lead security incidents, including containment and remediation, in fast-moving environments. • Strong investigative and analytical skills, with the ability to synthesize signals from multiple data sources. • Experience with security tooling such as SIEM and EDR platforms (e.g., Splunk, Elastic, SentinelOne, CrowdStrike, or similar). • Solid understanding of cloud security concepts and their application in real-world scenarios. • Strong communication skills, with the ability to clearly convey information across technical and non-technical audiences. • Experience building or improving automation for incident response workflows (e.g., scripting in Python; infrastructure-as-code is a plus).

🏖️ Benefits

• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents • Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses • Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge • ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount