Senior Manager, Security Incident Response

Affirm

. Lead security incidents and investigations through assessment, containment, remediation, recovery, and post-incident review .

Posted 10/30/2026full-timeRemote • United States, CanadaSenior💰 $236,000 - $296,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading security incidents and investigations, with a strong technical foundation in security operations, incident response, and digital forensics. Capable of managing technical teams and developing scalable response capabilities while effectively communicating with executive stakeholders.

Highest-signal resume keywords

Security Operations ManagementIncident Response LeadershipTechnical Team DevelopmentCloud-Native Security ExpertiseAI-Driven Security Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseRoot-Cause AnalysisDigital ForensicsSecurity OperationsDetection TechniquesSecurity ToolingCloud SecurityPostmortem AnalysisRisk ReportingAutomation Workflows

Soft Skills

Excellent CommunicationDecision-MakingProblem-SolvingLeadershipCollaboration

Tools & Technologies

SIEMEDRSOARSecurity TelemetryIncident Management Tools

Industry Keywords

Security IncidentsCross-Functional ResponseExecutive DashboardsOn-Call ReadinessEscalation Paths

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead security incidents and investigations through assessment, containment, remediation, recovery, and post-incident review
Serve as incident commander for major security events and coordinate technical and cross-functional response groups
Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive corrective actions
Manage and develop a technical, engineering-oriented response team
Set global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and response-effectiveness measures
Improve response tooling, security telemetry, detection, and automation, including agentic AI workflows with human oversight and security and privacy safeguards
Translate security and incident metrics into executive dashboards and board-level risk reporting

Requirements

What you’ll need

10+ years of experience in security operations, incident response, or a related security field
Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments
Strong technical foundation in security operations, investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments
Experience managing and developing technical or engineering teams
Experience building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR
Excellent written and verbal communication, including executive updates and board-level reporting
Ability to independently advance ambiguous work, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion
AI-forward mindset and judgment applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate safeguards

Benefits

Comp & perks

100% subsidized medical coverage for employees and dependents
Dental and vision coverage for employees and dependents
Monthly stipends for health, wellness, and tech spending
Flexible time off
Generous holiday calendars
Employee stock purchase plan (ESPP) with discounted Affirm stock
Remote-first work flexibility
In-person onboarding experience
Inclusive interview process and disability accommodations