Manager, Security Incident Response

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Build, lead, and cultivate a team of incident responders and security builders.

• Set clear expectations, foster ownership, and encourage team growth.

• Assign tasks based on team strengths, developmental goals, capabilities, and operational requirements.

• Establish and advance the security incident response roadmap and strategic objectives.

• Enhance agentic incident response, structured threat hunting, and insider risk investigations.

• Balance incident response efforts with strategic initiatives and team development priorities.

• Expand team capacity through AI-assisted tools and automation, ensuring human judgment, approval, auditability, and rollback controls are in place.

• Oversee detection, triage, containment, remediation, and post-incident learning processes.

• Act as an escalation point and incident manager for complex or high-severity incidents.

• Collaborate with Detection Engineering, Cyber Threat Intelligence, Red Team, and other teams to address detection and response deficiencies.

• Update playbooks, training, tabletop exercises, metrics, and reporting mechanisms.

• Participate in the on-call rotation as a leadership escalation point or incident manager.

• Monitor and report on incident trends, operational metrics, program maturity, and the impact of automation/AI.

⛳️ Requirements

• 5+ years of experience in security incident response.

• 2+ years in a management role or as a technical leader supporting career development and performance management.

• Proven experience in building or scaling incident response automation, tools, or AI-assisted workflows.

• Strong judgment regarding where automation should and should not make decisions.

• Experience in setting expectations, defining ownership, delegating tasks, and measuring outcomes.

• Proven track record of managing high-pressure security incidents.

• Robust understanding of cloud-native, SaaS, and identity-driven attack techniques and appropriate responses.

• Excellent communication skills for both technical and non-technical audiences.

• Experience in breaking down strategic initiatives into projects, coordinating team sprints, and managing competing priorities.

• A passion for promoting psychological safety and stability in high-stress environments.

• Must already possess legal authorization to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship will be provided.

• Successful candidates must complete a background check.

🏝️ Benefits

• Health benefits.

• Dental benefits.

• 401(k) / RRSP retirement matching program.

• Generous paid time off (PTO).

• Equity grant / RSU program available for most employees.

• Incentive programs, where applicable.

• Maternity and parental leave top-up programs.

• Complimentary 1Password account.

• Paid volunteer days.

• Peer-to-peer recognition through Bonusly.

• Remote-first work environment.

• Opportunities for travel to engage in-person for annual department-wide offsites, team meetings, and customer/industry events.

• Accommodations available upon request during the recruitment process.