Protect sensitive systems remotely as a Senior Insider Threat Security Engineer using security engineering and investigative expertise. Build trusted controls and detections for insider risk.

At affirms, you will mature the insider threat program across design, operations, investigations, and reporting. You will analyze telemetry and evidence, develop detection logic, and improve controls spanning DLP, endpoint monitoring, access governance, and SaaS posture management. This remote role is open to candidates residing in specified Canadian provinces.

Key Responsibilities:

- Lead insider threat workstreams from design through daily operation
- Develop investigative standards, playbooks, metrics, and reporting
- Support investigations with evidence analysis and written recommendations




- Threat model high-risk systems and create production detections
- Automate evidence collection, routing, reporting, triage, and investigation

Requirements:

- Deep expertise in security engineering, operations, insider risk, or forensics
- Experience establishing recent security capabilities
- Investigation experience including endpoint forensics and timeline reconstruction
- Detection logic experience across endpoint, identity, cloud, and SaaS telemetry
- Python, automation platform, and agentic automation experience

Apply security engineering, investigations, detection logic, and automation expertise to strengthen affirms’ insider threat program remotely.

📌 Senior Insider Threat Security Engineer (Toronto)
🏢 Affirm
📍 Toronto