Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm proudly includes Returnly.
Affirm values security as being critical to the company's continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Security Operations program is the foundation of both preventive and responsive security practices to protect Affirm's assets from an adverse event.
As a member of the Security Team at Affirm, you will be joining a team of fun, passionate and highly skilled individuals who like solving security challenges and enjoy learning new skills. We partner together with a team first mindset and are keen on redefining security in the fintech space.
We are looking for a Staff Sec Ops Engineer who will help us build and mature the Security Operations program including Logging, Detection, Response and Automation. In this role, you will collaborate with internal Security teams (such as Platform Security, Corporate Security) and other external teams (such as Infrastructure, Observability, Privacy/Compliance) to create and improve existing security operations capabilities. You will partner with the right teams to solve complex security problems and help design solutions that are aligned with broader organizational goals.
What You'll Do

• Drive monitoring, detection and response including remediation for security incidents throughout our environment.
• Contribute to our detection program by helping write advanced detections based on frameworks such as MITRE ATT&CK.
• Strong ability to analyze, parse and correlate information against data from multiple sources and when needed engineer solutions to do the same.
• Build and enhance our current logging pipeline to help ingest the right data sources needed to improve our visibility.
• Contribute to engineering projects involved in building, maintaining and improving our current tooling.
• Build automation between tools when needed to help improve logging, detection and response workflows.
• Contribute to developing and maturing security incident response playbooks and processes.
• Collaborate with cross functional teams across Affirm and lead key Security projects.
• Be the senior escalation point for the team when needed for help with investigations and incidents.

What We Look For

• A seasoned Detection and Response (D&R) Engineer with experience in handling investigations and incidents including containment actions and forensics when needed in a cloud heavy environment (AWS preferred).
• 5+ years of experience in Detection and Response with a significant engineering focus.
• Hands-on experience with container orchestration technologies (Kubernetes).
• Demonstrated experience in common Sec Ops tooling including but not limited to: Elastic, Splunk, Hive, Crowdstrike Falcon or similar.
• Ability to lead and drive large projects and work with cross functional stakeholders throughout the organization.
• Experience with developing native data ingestion and data normalization integrations.
• Experience using modern software development and delivery techniques to develop cloud-based services.
• Experience in creating automations to improve D&R program workflows and capabilities (Python scripting language preferred)
• Strong communication skills with the ability to switch communication style when needed between technical and non-technical audiences.
• Experience in offensive security is a bonus!
• Experience in meaningful threat intelligence and hunting is a bonus!

Location - Remote U.S.
Grade - 31
#LI-Remote
Affirm is proud to be a remote-first company ! The majority of our roles are remote and can be located anywhere in the U.S. and Canada (with the exception of the U.S. Territories, Quebec, Yukon, Nunavut, and the Northwest Territories) unless the job indicates a different global location. We are currently building operations in Spain, Poland, and Australia. Employees in remote roles have the option of working remotely or from an Affirm office in their country of hire, and may occasionally travel to an Affirm office or elsewhere for required meetings or team-building events. Our offices in Chicago, New York, Pittsburgh, Salt Lake City, San Francisco and Toronto will remain operational and accessible for anyone to use on a voluntary basis, subject to local COVID-19 guidelines.
[For U.S. Candidates] All full-time jobs at Affirm (excluding interns and apprentices) are tied to a transparent grade-based pay range taking location into account. The grade for this position is noted above and in accordance with various U.S. pay transparency laws, we provide the base pay range and benefits for our U.S.-based positions in the links below:
Jobs in Grades 21-54: shorturl.at/H0124
Jobs in Grades 61-74: shorturl.at/kK015
If you got this far, we hope you're feeling excited about this role. Even if you don't feel you meet every single requirement, we still encourage you to apply. We're eager to meet people who believe in Affirm's mission and can contribute to our team in a variety of ways-not just candidates who check all the boxes.
Inclusivity:
At Affirm, People Come First is one of our core values, and that's why diversity and inclusion are vital to our priorities as an equal opportunity employer. You can read about our D&I program here and our progress thus far in our 2021 DEI Report .
We also believe It's On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.
By clicking "Submit Application," you acknowledge that you have read the Affirm Employment Privacy Policy , or the Affirm Employment Privacy Notice (EU) for applicants applying from the European Union, and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.