Incident Commander, Detection & Response - US

Skills

About the Role

You will lead the response to complex security incidents affecting intellectual property, customer data and infrastructure. You'll set priorities, coordinate work streams, drive containment and recovery decisions, keep stakeholders informed, manage cross-time-zone handoffs and improve readiness through playbooks and post-incident reviews.

Requirements

• Personally led complex security incidents as incident commander or equivalent
• Sound decision-making with incomplete information
• Ability to coordinate responders across teams and time zones
• Clear communication under pressure
• Security and infrastructure fundamentals
• Understanding of detection engineering

Responsibilities

• Run incident command from assessment through containment, recovery and closure
• Assign work stream owners and coordinate investigation, containment and recovery
• Drive containment and recovery decisions within agreed decision rights
• Communicate incident status and impact to technical and nontechnical stakeholders
• Manage cross-time-zone handoffs
• Improve readiness through exercises, playbooks and post-incident reviews
• Partner with detection engineers to evaluate telemetry and close visibility gaps

Benefits

• Equity
• Performance-related bonus
• Medical, dental and vision insurance with HSA employer contributions
• Health FSA, Dependent Care FSA and commuter pre-tax accounts
• 401(k) with employer match
• Paid parental leave up to 24 weeks, plus paid medical and caregiver leave up to 8 weeks
• Flexible PTO for exempt employees
• 13+ paid company holidays and company office closures
• Mental health and wellness support
• Employer-paid basic life and disability coverage
• Annual learning and development stipend
• Daily meals in offices and meal delivery credits
• Relocation support
• Charitable donation matching and wellness stipends