Protect sensitive systems remotely as a Senior Insider Threat Security Engineer using security engineering and investigative expertise. Build trusted controls and detections for insider risk.

At affirms, you will mature the insider threat program across design, operations, investigations, and reporting. You will analyze telemetry and evidence, develop detection logic, and improve controls spanning DLP, endpoint monitoring, access governance, and SaaS posture management. This remote role is open to candidates residing in specified Canadian provinces.

Key Responsibilities

Lead insider threat workstreams from design through daily operation

Develop investigative standards, playbooks, metrics, and reporting

Support investigations with evidence analysis and written recommendations





Threat model high-risk systems and create production detections

Automate evidence collection, routing, reporting, triage, and investigation

Requirements

Deep expertise in security engineering, operations, insider risk, or forensics

Experience establishing recent security capabilities

Investigation experience including endpoint forensics and timeline reconstruction

Detection logic experience across endpoint, identity, cloud, and SaaS telemetry

Python, automation platform, and agentic automation experience

Apply security engineering, investigations, detection logic, and automation expertise to strengthen affirms’ insider threat program remotely.

📌 Senior Insider Threat Security Engineer (Winnipeg)
🏢 Affirm
📍 Winnipeg