Engineering Manager, Investigations and Incident Response

About This RoleAI processing…

Key Responsibilities

• 1
  Lead and mentor a diverse team of ~5+ senior engineers
• 2
  Partner with Security Platform and Detection Engineering teams to enhance telemetry, context, and response capabilities, and collaborate closely with key teams in Infrastructure Security, Application Security, Infrastructure teams, Legal, Privacy, Global Safety and Security, and Engineering teams across the organization.
• 3
  Coach and develop team members, help them grow their careers, technical expertise, and collaboration skills.
• 4
  Act as a senior escalation point during high-severity or complex incidents
• 5
  Ensure consistent, high-quality investigations with strong root cause analysis
• 6
  Establish clear priorities that balance speed, depth, and risk reduction
• 7
  Improve escalation paths, ownership clarity, and cross-functional coordination
• 8
  Use incident data to influence security priorities and investment decisions
• 9
  Partner closely with partner teams within Information Security to ensure incident learnings are shared and added to roadmaps for security risk reduction
• 10
  Work with infrastructure, product, and engineering teams to drive effective remediation
• 11
  Define and track key metrics such as MTTD, MTTR, incident severity, and recurrence
• 12
  Ensure clear communication during incidents to senior and executive leadership including updates on insights from incident patterns, trends, and emerging risks

Requirements

• 9+ years of industry experience in threat detection and incident response, with a minimum of 3-5 years in engineering management.
• Experience shaping or evolving incident response programs in complex environments
• Exceptional people management and mentorship skills, with a history of recruiting, developing and retaining top talent
• Strong understanding of attacker behavior and frameworks such as MITRE ATT&CK
• Experience and understanding of technologies such as EDR, SIEM, cloud environments, and investigation workflows
• Experience in cloud-native environments (AWS, GCP, Azure)
• Ability to analyze ambiguous situations and make sound, timely decisions
• Comfort partnering with engineering teams to build scalable solutions
• Ability to operate at both strategic and tactical levels, from executive communication to incident leadership
• Experience defining team strategy, priorities, and operating models
• Strong judgment in risk assessment, escalation, and trade-offs
• Excellent communication skills across technical and executive audiences

Perks & Benefits