Remote opportunity at
AffirmSenior Product Security Engineer
Affirm operates as a financial technology company providing predictable payment options over time without hidden fees or surprises. The InfoSec department protects company systems and data…
Career Tools
About This Role
Affirm operates as a financial technology company providing predictable payment options over time without hidden fees or surprises. The InfoSec department protects company systems and data by managing security risks, overseeing compliance, guiding incident response, and enforcing protective measures. Affirm seeks a Senior Product Security Engineer to advance its insider threat initiatives by establishing operational controls, detection use cases, and investigative procedures. This remote position suits a professional with deep…
Job Description
Affirm operates as a financial technology company providing predictable payment options over time without hidden fees or surprises. The InfoSec department protects company systems and data by managing security risks, overseeing compliance, guiding incident response, and enforcing protective measures. Affirm seeks a Senior Product Security Engineer to advance its insider threat initiatives by establishing operational controls, detection use cases, and investigative procedures. This remote position suits a professional with deep security engineering expertise who can collaborate with Legal, HR, Privacy, and Compliance teams while maintaining employee privacy and regulatory adherence.
The person in this role will guide insider threat workstreams from design to daily execution, establish operating mechanics and reporting metrics, and assist SIRT with insider risk investigations. Responsibilities include threat modeling high-risk data systems, improving data loss prevention and endpoint monitoring controls, and utilizing Python and automation platforms to streamline workflows and triage alerts. Candidates must demonstrate sound judgment, high discretion, and strong communication abilities when managing sensitive investigative matters.
Responsibilities
- Develop and operate key insider threat workstreams from initial design to day-to-day management
- Establish investigative standards, playbooks, operational metrics, and reporting mechanisms
- Participate in insider risk investigations alongside SIRT by delivering telemetry analysis, evidence review, and written recommendations
- Coordinate with Legal, Human Resources, Privacy, and Compliance to manage cases and escalation criteria while safeguarding employee privacy
- Conduct threat modeling on high-risk data and systems, collaborating with detection engineers to implement production detections
- Manage and enhance controls for data loss prevention, endpoint monitoring, secure browser access, contractor access, SaaS posture, and access governance
- Automate operational tasks, evidence collection, case routing, and reporting utilizing Python and workflow platforms
- Design and maintain agentic automations for alert triage and investigation support
Requirements
- Deep expertise in security engineering, security operations, insider risk, or digital forensics
- Demonstrated history of launching new security capabilities independently
- End-to-end investigation experience covering evidence handling, log and endpoint forensics, timeline reconstruction, and written reporting
- Capability to write and assess detection logic across endpoint, identity, cloud, and SaaS telemetry within a SIEM platform
- Practical experience with insider risk tooling including DLP, UEBA, EDR, CASB, and access governance
- Working knowledge of Python for security tooling and automation
- Experience building and maintaining production workflows in automation tools like Tines or Torq
- Experience creating and executing production agentic automations for alert triage and investigation
- Discretion, sound judgment, and strong written and verbal communication skills
Qualifications
- Experience working in regulated or financial services environments involving SOC 2, PCI DSS, or GLBA standards
Core Skills
Benefits
- 100% employer-subsidized medical coverage, dental, and vision for employees and their dependents
- Monthly spending stipends for tech setup, health, and wellness options
- Flexible time off and holiday schedules
- Employee stock purchase plan allowing discounted purchases of Affirm Holdings stock
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Senior Product Security Engineer role?
The base pay range is CAD 153,000 to 213,000 per year, complemented by equity rewards and monthly stipends.
Is this position remote?
Yes, this is a remote role open exclusively to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
What benefits are provided with this job?
Affirm offers 100% subsidized medical coverage, dental, and vision for employees and dependents, monthly spending stipends, flexible time off, and an employee stock purchase plan.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.