153K–213K CAD / year
Senior Product Security Engineer
OtherRemote — Canada
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and operate Affirm’s insider threat program, including investigative practices, risk controls, and production detections. Support sensitive investigations and partner with Legal, HR, Privacy, and Compliance to ensure the program is effective and proportionate.
About the company
Affirm offers buy now, pay later financing that lets consumers split purchases into transparent installment payments at checkout. It partners with merchants to provide flexible credit options without late fees.
The team
InfoSec
Stack
PythonSplunkElasticPantherChronicleTinesTorqDLP
What you'll do
- Design and operationalize insider threat workstreams, investigation standards, playbooks, metrics, and reporting
- Support investigations through telemetry and evidence analysis, timeline reconstruction, written findings, and risk recommendations
- Threat model high-risk data and systems and work with detection engineers to implement production detections
- Improve DLP, endpoint monitoring, secure browser, contractor access, SaaS posture, and access governance controls
- Automate evidence collection, case routing, and reporting with Python and workflow platforms
- Build agentic automations for triage and investigations, defining where human review is required
What we're looking for
- Deep expertise in security engineering, security operations, insider risk, or digital forensics
- Experience establishing security capabilities and running investigations end to end
- Ability to write and evaluate SIEM detections across endpoint, identity, cloud, and SaaS telemetry
- Hands-on experience with insider risk tools such as DLP, UEBA, EDR, CASB, and access governance
- Working knowledge of Python and production workflow automation platforms
- Experience operating agentic automations for alert triage or investigation with appropriate human oversight
- Sound judgment handling sensitive investigations and strong cross-functional communication
Nice to have
- Experience in regulated or financial services environments, including SOC 2, PCI DSS, or GLBA
Benefits
- 100% subsidized medical, dental, and vision coverage for employees and dependents
- Monthly technology, health, and wellness stipends
- Flexible time off and generous holiday calendars
- Employee stock purchase plan