Incident Manager - Detection & Response
Core
Own and evolve the end-to-end incident management program for detecting, responding to, and learning from security and operational incidents.
Role type
Senior Technical Program Manager (Incident Management)
Builds
Incident response lifecycle, detection workflows, response processes, escalation paths, and post-incident improvement initiatives.
Domain
Cybersecurity / AI Safety / Operational Resilience
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Incident management, program ownership, cross-functional influence, trend analysis, root cause analysis, playbook development, KPI definition, stakeholder coordination
Preferred skills
Building processes from scratch, on-call leadership, data-driven prioritization, training facilitation
Technologies
None explicitly listed
Responsibilities
Own the end-to-end D&R incident management program; Serve as incident commander for security incidents; Establish and run incident commander rotations; Drive post-incident accountability and action item tracking; Gather and report on incident trends and patterns; Translate trend analysis into cross-functional initiatives; Lead incident review forums; Develop and maintain incident response documentation; Partner with detection engineering to improve alert fidelity; Define and track incident management KPIs; Support cross-functional security awareness training
Seniority
Senior, hands-on IC