← All roles

Manager, Security Incident Response

1Password· Technology
Apply on company site
Remote$192k - $278kFull-timePosted 1mo ago

About the role

Lead the security incident response team, build automation and AI-assisted tooling, and manage high-severity incidents while shaping incident response strategy and cross-functional collaboration.

Responsibilities

  • Build, lead, and develop a team of incident responders and security builders, setting clear expectations, creating meaningful ownership, and supporting growth.
  • Delegate effectively based on team strengths, development goals, capacity, and operational needs while maintaining accountability for outcomes.
  • Define and drive the security incident response roadmap and strategic priorities, including maturing agentic incident response, structured threat hunting, and insider risk investigations as sustained, scaled capabilities rather than one-time builds.
  • Balance competing priorities across incident response, strategic initiatives, and team development; make tradeoffs clear and push back when timelines, approaches, or requests create unnecessary risk or unsustainable workload.
  • Scale team capacity through AI-assisted tooling and automation, maintaining appropriate controls around human judgment, approval, auditability, and rollback.
  • Oversee detection, triage, containment, remediation, and post-incident learning, serving as an escalation point and incident manager for complex or high-severity events.
  • Partner with Detection Engineering, Cyber Threat Intelligence, Red Team and other teams to improve cross-functional processes and close detection or response gaps identified through investigations.
  • Evolve playbooks, training, tabletop exercises, metrics, and reporting to strengthen operational readiness and program maturity.
  • Participate in the on-call rotation, serving as the leadership escalation or incident manager during major or complex incidents.
  • Track and report on incident trends, operational metrics, and program maturity, including the impact of automation and AI tooling on response time and coverage.

Qualifications

  • 5+ years in security incident response, with 2+ years as a people manager or technical leader supporting career development and performance management.
  • Experience building or scaling incident response automation, tooling, or AI-assisted workflows (triage, enrichment, investigation) with sound judgment about automation boundaries.
  • Experience setting clear expectations, defining ownership, delegating work, and measuring outcomes.
  • Experience managing high-pressure security incidents with clarity, structure, and calm.
  • Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and how to respond to them.
  • Strong communication skills to explain complex findings to technical and non-technical audiences.
  • Experience breaking down strategic initiatives into projects, coordinating team sprints, and managing work across competing priorities.
  • Passion for fostering psychological safety and stability in stressful environments.

Skills

Required:Security incident responsePeople managementAutomation and AI in securityCloud-native and SaaS security

Benefits

  • Health and wellbeing benefits
  • Generous PTO policy
  • RSU program for most employees
  • Retirement matching program
  • Free 1Password account
  • Paid volunteer days
  • Peer-to-peer recognition through Bonusly
  • Remote-first work environment
Last updated Sep 2, 2026. Interested? Apply on the company site.
1Password logo

About 1Password

Password Manager & Extended Access Management | 1Password

More than a password manager and leader in Extended Access Management. Secure all sign-ins to every application from any device with 1Password.

Password ManagementExtended Access ManagementEnterprise SecurityCybersecuritySaaS ManagementPassword Generator
Company profileWebsite

More open roles at 1Password