Senior Manager, Security Incident Response

Affirm

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Canada
Salary
$265,000–$325,000 / yr
Posted
5 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $191k
This role $295k
$118k $347k
below market most similar roles pay here above market

This role pays more than 96% of similar roles. Most pay $159,750–$222,601 — the blue band above. At the midpoint, this role pays about $295k versus about $191k for comparable roles.

Based on 240 similar postings.

Employer

About Affirm

Affirm is a buy-now, pay-later (BNPL) financial technology company that offers point-of-sale installment loans to consumers, allowing them to split purchases into fixed monthly payments with transparent terms. Industry: Financial Technology & Consumer Lending

Affirm currently has 66 open roles on FindRole.

Listed pay typically runs $195,000–$255,000 across 59 roles with salary data.

Most-posted roles

View all roles at Affirm

At a glance

TL;DR · Senior Manager, Security Incident Response

The Senior Manager, Security Incident Response joins the Security Operations and Resilience Engineering team to lead global security investigations and incident response programs. This leader manages a technically deep, engineering-oriented team responsible for the full lifecycle of security incidents, including assessment, containment, remediation, and recovery. Key responsibilities include serving as an incident commander for major events, guiding root-cause analyses, and developing scalable operating practices like playbooks and on-call readiness. The role involves driving engineering improvements to security telemetry, detection, and automation using SIEM, EDR, and SOAR tools. Additionally, the position focuses on shaping AI-enabled investigation workflows, including agentic approaches to evidence gathering. The work addresses the technical challenge of maintaining consistent response capabilities and security posture across a global, cloud-native fintech environment.

What you'll do

  • Lead security incidents and investigations across the full lifecycle from initial assessment through recovery.
  • Serve as incident commander for major security events by coordinating large technical and cross-functional response groups.
  • Guide technical investigations and root-cause analyses with engineering teams to drive durable corrective actions.
  • Manage and develop a technical, engineering-oriented response team by setting priorities and coaching engineers.
  • Establish global readiness practices including playbooks, escalation paths, on-call readiness, and postmortems.
  • Drive engineering improvements to response tooling, security telemetry, and agentic AI workflows for investigation.
  • Translate complex security metrics into actionable executive dashboards and board-level risk reporting.

What we're looking for

  • 10+ years of experience in security operations, incident response, or a related security field.
  • Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments.
  • Strong technical foundation in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments.
  • Experience managing and developing technical or engineering teams, including coaching engineers and guiding hands-on incident work.
  • Track record of building scalable response capabilities using SIEM, EDR, or SOAR tools and repeatable practices like playbooks and postmortems.
  • Excellent written and verbal communication skills to translate complex security metrics into executive and board-level reporting.
  • Demonstrated ability to move ambiguous work forward and make sound decisions with incomplete information to drive measurable results.
  • Experience in fintech or payments, and familiarity with using threat intelligence to inform response (preferred).

More like this

Similar roles

Principal Security Engineer, Incident Response

F5 Inc

Seattle +1 23 days ago $182,200–$273,200
Incident Response Cybersecurity AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation FedRAMP NIST SP 800-61 ISO 27001 SOC 2 PCI-DSS MITRE ATT&CK Digital Forensics Load Balancing NGINX BIG-IP
10+ yrs exp Hybrid

Senior Security Incident Response Engineer

Apple Inc

Seattle, WA 5 days ago $166,600–$250,700
Incident Response Security Engineering Intrusion Detection CI-CD Malware Analysis Digital Forensics Threat Intelligence Threat Modeling Identity Management SaaS OSCP GIAC CCNP CCIE
5+ yrs exp

Senior Security Incident Response Engineer

Apple Inc

Austin, TX 5 days ago
Incident Response Security Engineering Intrusion Detection Scripting CI-CD Malware Analysis Digital Forensics Threat Modeling Threat Intelligence Identity Management Cloud Control Planes SaaS OS Internals Data Analysis Automation
5+ yrs exp

Security Engineer, Incident Response

F5 Inc

Seattle +1 30 days ago $132,000–$198,000
Incident Response Security Operations (SOC) Threat Hunting Digital Forensics AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation MITRE ATT&CK NIST SP 800-61 ISO 27001 FedRAMP PCI-DSS NGINX BIG-IP
5+ yrs exp Hybrid

Incident Response Analyst, Senior

Booz Allen Hamilton

Bethesda, MD 53 days ago
Splunk SIEM EDR IDS IPS SOAR Microsoft Defender Vulnerability Management Digital Forensics Packet Analysis Threat Hunting Behavioral Analytics Threat Intelligence Identity and Access Management Container Security API Security Log Analysis Incident Response Playbooks
5+ yrs exp

Senior Manager, Cybersecurity

Nvidia

Remote (CA) 29 days ago
Incident Response SIEM EDR Cloud Security AWS Azure GCP Security Automation Digital Forensics Threat Hunting Detection Engineering Log Analysis Malware Analysis Agile Identity and Access Management
10+ yrs exp Remote