Staff Security Engineer (Detection & Response)

Affirm recognizes that security is essential to the company’s ongoing success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Security Operations and Resilience Engineering (Sec Ops) program is the foundation of both preventive and responsive security practices to protect Affirm’s assets from an adverse security event. 

As a member of the Security Team at Affirm, you will be joining a team of fun, passionate and highly skilled individuals who like solving security challenges and enjoy learning new skills. We partner together with a team first mindset and are keen on redefining security in the fintech space. 

We're seeking a Staff Security Engineer who will help us build and mature the Security Observability Engineering program with a focus on Automation to support the Detection and Response workflows. 

This is a hands-on role where we are looking for engineering experience securing cloud environments and building automations across different platforms. You will also participate in on-call duties along with the rest of the team and serve as engineering escalation point for the team. 

This is a very collaborative role where you will get to partner with internal Security teams such as Platform Security as well as other external teams (such as Infrastructure, Observability, Privacy/Legal) to create and improve security operations capabilities. As such, the cross functional work with these teams will often tackle complex security problems and design solutions that align with our broader organizational goals. Your impact will not only be within the company but also in improving the trust and security of millions of customers, merchants and partners.

• Serve as a hands-on technical leader to mature our Security Observability & Detection Engineering program. 
• Build automation and middleware-based integrations between tools when needed to help improve detection and response workflows. 
• Build out and enhance our logging pipelines around critical data sources to improve our overall IR observability
• Contribute to our detection program by writing advanced detections based on frameworks such as MITRE ATT&CK. 
• Continuously tune detections to improve our detection fidelity and calibrate signals to maximize value while minimizing noise. 
• Support the Incident Response team by participating in on-call duties, serving as a senior escalation point for engineering, and helping to lead remediation efforts for security incidents. 
• Contribute to developing and maturing security incident response playbooks and processes.

• Collaborate with cross functional teams across Affirm and lead key Security projects. 
• We highly encourage and support external engagement, publications, presentations with the security community as well. 

• A seasoned Security Operations Engineer with at least 5+ years of experience in Detection and Response with a significant engineering focus in a cloud heavy environment  (AWS, EKS experience strongly preferred).
• Experience in programming to create automations to improve IR program workflows and capabilities (Python & Terraform IAC experience preferred). 
• Experience with developing native data ingestion and data normalization integrations to improve observability. 
• Hands-on experience handling investigative, containment and remediation actions across environments and the ability to partner with Infrastructure / SRE teams during incidents. 
• Demonstrated experience in common Sec Ops tooling pertaining to SIEM, EDR, and MDR providers. For example: Splunk, Elastic, SentinelOne, CrowdStrike, Red Canary, Expel, etc. or similar. 
• Hands-on experience with container orchestration technologies (Kubernetes or similar).
• Experience in creating automations to improve IR program workflows and capabilities (Python preferred). 
• Familiarity with Infrastructure-as-code (IaC) including experience developing and deploying cloud resources using Terraform.
• Strong communication skills with the ability to switch communication styles when needed between engineering and non-engineering audiences. 
• Ability to lead larger projects and drive workstreams with cross functional stakeholders throughout the Engineering organization. 

Pay Grade - P
Equity Grade - 13
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $225,000 - $275,000
USA base pay range (all other U.S. states) per year: $200,000 - $250,000
#LI-Remote