Incident Response Program Manager

Microsoft

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Seattle, WA
Posted
5 days ago
Freshness
Confirmed live today
Closes
Apr 20, 2027

Market check

Salary context

How this pay compares to similar roles

Similar $188k
$141k $231k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $162,000–$213,656.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 694 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 651 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Incident Response Program Manager

The Incident Response Program Manager joins the team to protect customers and the business by supporting the timely containment of active or potential data exposure. This role involves gathering facts to assess customer impact, coordinating with privacy, legal, security, and engineering stakeholders to evaluate regulatory requirements, and managing time-sensitive internal service commitments. You will develop runbooks, decision trees, and escalation paths while participating in a shared on-call rotation. Key responsibilities include analyzing operational data to improve response quality, managing incident triage, and supporting the operation of AI solutions and incident-response automations. Required skills include experience with ServiceNow or comparable case-management platforms, data analysis, and technical program management. You must navigate complex environments involving restricted environments, government information, and global team coordination to drive clear actions during high-pressure situations.

What you'll do

  • Support timely containment of active data exposures by gathering and validating facts to assess customer impact.
  • Coordinate with legal, privacy, and engineering stakeholders to evaluate regulatory and contractual notification requirements.
  • Participate in a shared on-call rotation to provide incident-response coverage during active events.
  • Analyze operational data and case trends to improve response quality, speed, and stakeholder experience.
  • Develop and maintain runbooks, decision trees, escalation paths, and incident-response readiness materials.
  • Lead AI-powered transformation initiatives, including the implementation of agentic workflows and incident-response automations.
  • Facilitate structured discussions during high-pressure situations to drive stakeholders toward clear decisions and actions.
  • Participate in post-incident reviews and tabletop exercises to drive continuous process improvement.

What we're looking for

  • Bachelor's Degree and 2+ years of experience in engineering, product/technical program management, data analysis, or product development (or equivalent experience).
  • 1+ year(s) of experience managing cross-functional and/or cross-team projects.
  • Experience coordinating incident triage, containment, investigation, remediation, evidence collection, or post-incident reviews.
  • Experience developing or improving operational procedures, runbooks, escalation paths, metrics, dashboards, and service-management processes.
  • Experience partnering with engineering teams to manage defects, operational dependencies, production readiness, and automation.
  • Familiarity with incident and case-management platforms such as ServiceNow or comparable systems.
  • Familiarity with regulatory, contractual, customer-notification, or government-environment considerations affecting incident response.
  • Experience leading AI-powered transformation initiatives, including agentic workflows, automation, and data-driven solutions at enterprise scale (preferred).

More like this

Similar roles

Critical Incident Communications Manager

Salesforce

Bellevue, WA +1 53 days ago
Salesforce AWS GCP Incident Management Cloud Infrastructure Database Architecture CRM Technical Writing Crisis Communications Change Management Project Management
5+ yrs exp

Senior Incident Operations Manager

Chime

Chicago, IL +2 19 days ago $141,000–$195,000
Incident Management Observability PagerDuty incident.io Datadog Jira Slack Google Workspace Distributed Systems Runbooks
3+ yrs exp

Senior Incident Responder, Global CSIRT

Salesforce

McLean, VA +1 53 days ago $148,500–$223,900
Incident Response SOAR MITRE ATT&CK AWS Azure GCP CI/CD Malware Analysis Detection Engineering Forensics Linux Windows macOS AI LLM Salesforce Platform SaaS
5+ yrs exp Hybrid

Incident Management Consultant

Allstate

Remote (IL) 13 days ago
ServiceNow Power BI Artificial Intelligence MS Office Incident Management Incident Response Incident Command System CRM Automation IT Conferencing Software Incident Tracking Software
2+ yrs exp Remote

Lead Technical Program Manager

JPMorgan Chase

Jersey City, NJ 22 days ago
Jira AI Change Control Production Readiness Runbooks Metrics Platform Modernization Incident Coordination Data Sensitivity Architecture Non-functional Requirements
5+ yrs exp

Cloud Cyber Incident Response Manager

Booz Allen Hamilton

McLean, VA 21 days ago $112,800–$257,000
Digital Forensics Incident Response DFIR AWS Azure GCP Splunk Elastic AWS Athena Data Analysis Cybersecurity Evidence Preservation Chain of Custody
7+ yrs exp