Senior Security Technologist, Incident Commander

What you'll do

• Lead the end-to-end response for the highest severity and most complex security incidents as the single accountable leader.
• Make real-time, high-consequence decisions during active incidents while balancing speed, risk, and technical impact.
• Perform hands-on technical investigations including log analysis, system interrogation, and root cause validation.
• Brief senior leadership during critical incidents by translating technical realities into clear risk and decision frameworks.
• Conduct rigorous post-incident analyses to identify systemic causes and implement durable, concrete prevention measures.
• Design and lead high-fidelity incident simulations, technical tabletop exercises, and threat-informed response planning.
• Develop and automate incident response tooling, including detection, containment workflows, and AI-assisted investigation techniques.
• Mentor other responders and incident leaders to improve the organization's ability to handle complex security events.

What we're looking for

• 5+ years in security operations, detection, or incident response roles at scale.
• Demonstrated ownership of ambiguous, large, complex, and high-impact security incidents.
• Deep familiarity with modern attacker TTPs across logs, systems, networks, endpoints, and applications.
• Strong technical investigation skills using logs, telemetry, and raw system data to validate hypotheses.
• Experience briefing executives during active incidents to explain tradeoffs, risks, and recommended actions.
• Experience designing or running technical incident simulations like tabletops or purple team exercises.
• Experience building or leveraging AI-driven tooling to improve incident response posture.
• Ability to script or code in Python, Go, or similar to automate response tasks (preferred).