Senior Manager, Security Incident Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security incidents and investigations throughout the entire lifecycle, from initial evaluation to containment, remediation, recovery, and post-incident analysis.

• Act as the incident commander during significant security events.

• Establish clear roles and decision-making pathways while coordinating extensive technical and cross-functional response teams.

• Lead technical investigations and root-cause analyses in collaboration with engineering teams.

• Validate solutions and promote sustainable corrective actions across the organization.

• Manage and nurture a response team with a technical and engineering focus.

• Prioritize tasks, mentor engineers, and enhance incident command capabilities and consistent execution across various regions.

• Define operational objectives and global readiness protocols, which encompass playbooks, escalation paths, drills, on-call preparedness, postmortems, and measures of response effectiveness.

• Enhance response tools, security telemetry, detection mechanisms, and automation processes.

• Create agentic AI workflows that support investigation and analysis while ensuring human oversight and compliance with security and privacy standards.

• Convert security and incident metrics into executive dashboards and risk reports for board-level presentation.

• Identify trends and remediation priorities to stimulate cross-functional initiatives.

⛳️ Requirements

• A minimum of 10 years of experience in security operations, incident response, or a similar security domain.

• Demonstrated capability to lead significant security incidents and investigations in technology-driven, cloud-native settings.

• Strong technical expertise in security operations, investigations, incident response, detection, root-cause analysis, and/or digital forensics across both cloud and enterprise environments.

• Experience in managing and developing technical or engineering teams.

• Proven track record in setting strategic direction and priorities, mentoring engineers, and guiding hands-on incident responses.

• History of establishing scalable response capabilities through repeatable practices, on-call readiness, drills, postmortems, operational metrics, and security tools such as SIEM, EDR, or SOAR.

• Exceptional written and verbal communication skills.

• Ability to convey complex incidents, security metrics, and their implications for customers or businesses in executive updates and board-level reporting.

• Capacity to independently advance ambiguous tasks and make informed decisions despite incomplete information.

• Proven ability to drive investigations, remediation efforts, and program enhancements to successful completion with measurable outcomes.

• AI-forward perspective and sound judgment in applying AI to security operations, including agentic investigations or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.

• Experience in fintech or payments and knowledge of threat intelligence are considered a plus.

🏝️ Benefits

• Base salary is part of a comprehensive compensation package that may include equity rewards.

• Monthly stipends for health, wellness, and technology expenses.

• 100% covered medical, dental, and vision insurance for you and your dependents.

• Health coverage at no cost: 100% of premiums paid for employees and their families.

• Monthly stipends to support technology setup and health and wellness initiatives.

• Flexible time off policy.

• Generous holiday schedule.

• Employee stock purchase plan (ESPP) allowing the purchase of Affirm stock at a discounted rate.

• Remote-first work environment.

• In-person onboarding process for all new hires.

• Inclusive interview procedures and accommodations available for candidates with disabilities.