CareerPlan

Partner 34, Lead Engineer, Incident Response

San FranciscoFull-time$295k2026-10-06 → 2026-11-11
Hybrid

Core

Lead a detection and response team protecting a venture capital firm's infrastructure, financial transactions, and relationships from cyber threats, fraud, and social engineering.

Role type

Senior IC Lead Engineer (Incident Response & Detection)

Builds

Detection capabilities, response automation, and security tooling for cloud, SaaS, identity, and endpoint environments.

Domain

Cybersecurity / Incident Response / Threat Hunting

Required skills

Incident response leadership, cloud security (AWS/GCP), detection engineering (SIEM, KQL, Sigma), threat hunting, Python automation, cross-functional communication, postmortem analysis, fraud/impersonation protection

Preferred skills

GCIH certification, AI/agent systems knowledge, SOAR tool experience

Technologies

AWS, GCP, SIEM, KQL, Sigma, Python, EDR, SOAR

Responsibilities

Set detection and response roadmap; lead and develop engineers; manage high-stakes incidents and vendor escalations; design SIEM architecture and log pipelines; run hypothesis-driven threat hunts; build brand protection capabilities; develop AI-assisted response automation; lead postmortems and corrective actions.

Seniority

Senior, hands-on IC with management responsibilities