Define and execute new approaches to detecting, containing, and mitigating security threats and incidents, while driving the next stage of maturity for our investigations and response capabilities.
Own incident response and investigation outcomes, leading end-to-end response across identification, containment, eradication, and recovery.
Shape how the team operates—evolving operating models, guiding execution during incidents, and scaling through thoughtful use of automation and engineering.
Define and drive the strategy for a modern incident response function, ensuring high-quality investigations and that every incident leads to meaningful improvements in our detection and response capabilities.
Assess current capabilities and chart the path forward across people, process, and technology, evolving the operating model to support effective global response.
Scale the function through automation, tooling, and improved workflows—solving repeatable problems with systems, not manual effort.
Serve as a key voice to senior leadership, communicating incident trends, risks, and strategic direction, and partner across the company to turn incident learnings into durable security improvements resulting in removal of entire classes of problems.

Requirements

9+ years of industry experience in threat detection and incident response, with a minimum of 3-5 years in engineering management.
Experience shaping or evolving incident response programs in complex environments
Exceptional people management and mentorship skills, with a history of recruiting, developing and retaining top talent
Strong understanding of attacker behavior and frameworks such as MITRE ATT&CK
Experience and understanding of technologies such as EDR, SIEM, cloud environments, and investigation workflows
Experience in cloud-native environments (AWS, GCP, Azure)
Ability to analyze ambiguous situations and make sound, timely decisions
Comfort partnering with engineering teams to build scalable solutions
Ability to operate at both strategic and tactical levels, from executive communication to incident leadership
Experience defining team strategy, priorities, and operating models
Strong judgment in risk assessment, escalation, and trade-offs
Excellent communication skills across technical and executive audiences.

Benefits

Competitive salary
Bonus potential
Equity options
Employee Travel Credits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat detectionincident responseengineering managementincident response programsattacker behaviorMITRE ATT&CKEDRSIEMcloud environmentsinvestigation workflows

Soft Skills

people managementmentorshiprecruitingdeveloping talentstrategic communicationtactical decision-makingrisk assessmentescalationtrade-offsproblem-solving