Requirements
- Led critical incident responses at organizations with advanced threat landscapes, serving as the top decision-maker during events.
- Made high-stakes disclosure decisions within strict regulatory and customer reporting timelines.
- Authored operational runbooks followed by engineering teams during high-pressure situations, and iterated on them when they failed.
- Designed and implemented incident response processes in environments lacking prior structure.
- Studied and engaged with the agent-first approach as a notable innovation in modern incident response design.
- Holds clear, evidence-based views on what makes incident response procedures and runbooks effective in practice.
- Communicates seamlessly between technical teams handling containment and leadership, legal, or customer-facing stakeholders during active incidents.
- Identifies gaps during crises, defines scope independently, and executes solutions without direction.
Nice to Have
- Handled incidents involving interconnected cyber, physical, and operational technology or industrial control systems.
- Worked in environments such as critical infrastructure, data centers, or industrial operations.
- Designed or operated agent-assisted incident response systems, including automated triage, investigation, or response workflows.
- Optimized large language model-driven incident response tools using precision and recall metrics.
Benefits
- Competitive total compensation including salary and equity
- Retirement or pension plan aligned with local standards
- Comprehensive health, dental, and vision insurance coverage
- Generous paid time off policy consistent with regional norms
Compensation
Competitive total compensation package (salary + equity)
Team
Small, fast-moving team with minimal hierarchy and rapid decision cycles
Team
- Team size: small
- Structure: fast