Senior Manager, Security Incident Response

About the Position

We're seeking an experienced Security Incident Response leader for a remote role at Returnly, guiding complex investigations and incident response.

Responsibilities

• Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
• Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity.
• Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.
• Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.
• Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
• Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.
• Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.

Requirements

• 10+ years of experience in security operations, incident response, or a related security field.
• Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.
• Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.
• Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.
• Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.
• Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.
• Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.
• An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.

We Offer

• Competitive salary: USD 236k-325k / year + Equity
• Remote-first with flexibility built in
• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.

About the Company

At Returnly, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Returnly’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.