Senior Product Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Advance Affirm’s insider threat initiative.

• Oversee critical insider threat workstreams from their initial design to daily operations.

• Develop investigative standards, playbooks, metrics, and reporting frameworks.

• Assist in insider risk investigations with the SIRT, which includes telemetry and evidence analysis along with written findings.

• Collaborate with Legal, HR/Employee Relations, Privacy, and Compliance on case management and escalation protocols.

• Model threats for high-risk data and systems related to insider risks, transforming results into actionable detections with detection engineers.

• Manage and enhance controls such as DLP, endpoint monitoring, secure browser and contractor access controls, SaaS posture management, and access governance.

• Automate evidence gathering, case routing, and reporting using workflow automation platforms and Python.

• Create and enhance agentic automations for insider risk triage and investigation while establishing human-review parameters.

⛳️ Requirements

• Extensive expertise in security engineering, security operations, insider risk, or digital forensics.

• Proven history of establishing new security capabilities in environments where few existed previously.

• Experience managing investigations from start to finish, including evidence management, log and endpoint forensics, timeline reconstruction, and producing written findings appropriate for Legal and HR stakeholders.

• Proficient in writing and assessing detection logic against endpoint, identity, cloud, and SaaS telemetry within a SIEM such as Splunk, Elastic, Panther, Chronicle, or similar platforms.

• Practical experience with DLP, UEBA, endpoint detection and response, CASB, and access governance.

• Familiarity with Python for security tools and automation processes.

• Experience in developing and maintaining production workflows using Tines, Torq, or comparable automation platforms.

• Experience in constructing and executing agentic automations in production for alert triage and investigation, inclusive of human review controls.

• Discretion and sound judgment in managing sensitive investigations.

• Ability to navigate considerations related to privacy, legal matters, and employee relations.

• Strong written and verbal communication skills, with the ability to collaborate across Security, Engineering, Legal, HR, Privacy, and Compliance teams.

• Experience in regulated or financial services environments (SOC 2, PCI DSS, GLBA) is advantageous.

🏝️ Benefits

• Monthly stipends for health, wellness, and technology expenses.

• 100% subsidized medical coverage for employees and their dependents.

• Dental and vision coverage available for employees and their dependents.

• Flexible time off policy.

• Generous holiday schedule.

• Employee stock purchase plan (ESPP) allowing purchase of Affirm stock at a discounted rate.

• Inclusive interview process with provisions for disability accommodations.

• Remote-first work flexibility.

• In-person onboarding experience provided for all new hires.