Protect sensitive systems remotely as a Senior Insider Threat Security Engineer using security engineering and investigative expertise. Build trusted controls and detections for insider risk.
At affirms, you will mature the insider threat program across design, operations, investigations, and reporting. You will analyze telemetry and evidence, develop detection logic, and improve controls spanning DLP, endpoint monitoring, access governance, and SaaS posture management. This remote role is open to candidates residing in specified Canadian provinces.

Key Responsibilities

Lead insider threat workstreams from design through daily operationDevelop investigative standards, playbooks, metrics,



and reportingSupport investigations with evidence analysis and written recommendationsThreat model high-risk systems and create production detectionsAutomate evidence collection, routing, reporting, triage, and investigationRequirements:
Deep expertise in security engineering, operations, insider risk, or forensicsExperience establishing current security capabilitiesInvestigation experience including endpoint forensics and timeline reconstructionDetection logic experience across endpoint, identity, cloud, and SaaS telemetryPython, automation platform, and agentic automation experienceApply security engineering, investigations, detection logic, and automation expertise to strengthen affirms’ insider threat program remotely.
#J-18808-Ljbffr

📌 Senior Insider Threat Security Engineer (Winnipeg)
🏢 Affirm
📍 Winnipeg