The opportunity
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
What you'll do
Lead the build-out of key insider threat workstreams, from initial design through to day-to-day operation
Build out the program's operating mechanics, including investigative: standards, playbooks, and the metrics and reporting that show whether the program is working
Support insider risk investigations alongside SIRT, bringing insider threat: expertise, telemetry and evidence analysis, and written findings and risk recommendations
Partner with Legal, HR/Employee Relations, Privacy, and Compliance on case: handling and escalation criteria, helping ensure the program respects employee privacy and meets legal and regulatory obligations
Threat model Affirm's highest-risk data and systems for insider risk, and: partner with detection engineers to turn the results into production detections
Own and improve the controls that reduce insider risk, including data loss: prevention, endpoint monitoring, secure browser and contractor access controls, SaaS posture management, and access governance, working with system owners to close gap
What they're looking for
- Automate the program's operational load with workflow automation platforms: and Python, covering evidence collection, case routing, and reporting
- Build and expand agentic automations that assist with insider risk triage and: investigation, and define which decisions stay with a human
- Deep expertise in security engineering, security operations, insider risk, or digital forensics
- Track record of standing up new security capabilities where little existed before
