- Company: Affirm
- Location: Remote Canada
- Job type: Full-time
- Salary: CAD $209,000 – $269,000 per year
About the role
Affirm is looking for an experienced security leader to head its global security investigations and incident response program. As the company expands internationally, you will guide complex investigations and build the operating practices and technical capabilities needed for consistent response across regions. You will lead a technically deep, engineering-oriented team that manages major incidents and improves response capabilities.
This role involves directing complex investigations while staying close to the technical work. You will bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You will also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering and analysis, with human oversight and clear security, privacy, and operational safeguards.
Responsibilities
- Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
- Serve as incident commander for major security events, setting clear roles and decision paths while coordinating large technical and cross-functional response groups.
- Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions.
- Manage and develop a technical response team, setting priorities, coaching engineers, and building incident command depth across regions.
- Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
- Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows with appropriate human oversight.
- Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting.
Requirements
- 10+ years of experience in security operations, incident response, or a related security field.
- Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments.
- Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics.
- Experience managing and developing technical or engineering teams, including coaching engineers and guiding hands-on incident work.
- Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, and security tooling such as SIEM, EDR, or SOAR.
- Excellent written and verbal communication skills, including the ability to translate complex incidents into clear executive updates and board-level reporting.
- Demonstrated ability to independently move ambiguous work forward and make sound decisions with incomplete information.
- An AI-forward mindset and sound judgment in applying AI to security operations with human oversight and appropriate safeguards.
- Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.
Pay and benefits
The base pay range for this position is CAD $209,000 – $269,000 per year. New employees typically start at the beginning of the pay range, which is based on location, experience, and job-related skills.
Benefits include 100% subsidized medical coverage, dental and vision for you and your dependents, and monthly stipends for health, wellness, and tech spending. Employees may also be eligible for equity rewards offered by Affirm Holdings, Inc. Affirm is a remote-first company, and this role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
How to apply
Apply directly on Affirm’s own careers website. Omadaily never charges job seekers.
