Manager, Security Incident Response
1Password
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteSalary
💰 $190,000 - $258,000 per year
Job Level
Mid-LevelSenior
Tech Stack
Cloud
About the role
- Lead, mentor, and develop a team of incident responders, ensuring clear expectations, growth, and consistent execution.
- Define and drive the security incident response roadmap and strategic priorities, focusing on maturity, scalability, and readiness.
- Oversee execution across detection, triage, containment, remediation, and post-incident learning.
- Support forensic investigations, log reviews, cloud investigations, and root-cause analysis as an escalation point
- Partner with Detection Engineering, Threat Intelligence, and other teams to improve cross-functional processes.
- Maintain and evolve the development of incident response playbooks, team processes, training, and tabletop exercises.
- Communicate effectively with stakeholders at all levels during incidents and throughout follow-up reporting.
- Participate in the on-call rotation, serving as an incident manager or responder during major or complex incidents.
- Track and report on incident trends, operational metrics, and program maturity.
Requirements
- 5+ years in security incident response, with 2+ years as a people manager or technical leader
- Experience setting clear expectations, goals, and success metrics for individuals and teams.
- Experience managing high-pressure security incidents with clarity, structure, and calm.
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and how to respond to them.
- Clear communication skills with the ability to distill complex findings for both technical and non-technical audiences.
- Experience breaking down large initiatives into projects and planning team sprints.
- Passion for fostering psychological safety and stability in stressful environments.
Benefits
- health, dental, 401k and many others
- generous paid time off
- equity grant
- participation in our incentive programs
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
security incident responseforensic investigationslog reviewscloud investigationsroot-cause analysisincident response playbooksdetection engineeringthreat intelligenceincident managementoperational metrics
Soft skills
leadershipmentoringclear communicationgoal settingstress managementproject planningpsychological safetyteam developmentstakeholder communicationcross-functional collaboration