Staff Security Engineer, Security Incident Response

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Security Engineer, Security Incident Response based in Canada .

This is a senior individual contributor role with organization-wide impact on security incident response and preparedness.
You will serve as a technical leader for complex, high-severity incidents while helping evolve how investigations and response are conducted.
The role combines deep security engineering with incident command, threat hunting, insider risk, and long-term capability development.
You will design AI-assisted and automated systems that expand the team's ability to triage, investigate, and contain security events.
You will also lead readiness initiatives such as tabletop exercises and gamedays, translating lessons learned into measurable improvements.
Working across Security Operations, Product Security, Engineering, Privacy, and other teams, you will build reusable systems and practices that strengthen organizational resilience.
This remote opportunity is designed for an experienced security engineer who can operate independently, make sound decisions under pressure, and deliver complex multi-quarter initiatives.

• Serve as the incident manager and technical escalation point for complex, high-severity security events, providing structure, judgment, and clear decision-making under pressure.
• Design and build AI-assisted and automated systems that improve the speed and consistency of security triage, investigation, and containment.
• Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted security actions while maintaining human oversight of high-impact decisions.
• Own security readiness programs, including tabletop exercises and incident gamedays, from scenario design and execution through debriefing and measurable improvements.
• Advance threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering initiatives that improve investigative depth and coverage.
• Own and deliver multi-quarter capability initiatives, including planning, sequencing, dependency management, and execution beyond standard sprint-based work.
• Mentor engineers and provide technical leadership that strengthens engineering practices, investigative judgment, and incident response capabilities across the team.
• Partner with Security Operations, Product Security, Engineering, Privacy, and other stakeholders to address gaps identified through investigations, threat hunting, and simulations.
• Promote psychological safety and blameless learning through incident retrospectives, gamedays, and tabletop debriefs.
• Build reusable tooling, systems, and operating patterns that extend strong incident response practices across the broader security and engineering organization.

Requirements:

• Significant experience leading complex, high-severity security incidents across multiple environments, including experience serving as an incident commander or equivalent technical lead.
• Hands-on experience designing and building AI-assisted or agentic automation for security operations, including triage, investigation, or containment, with sound judgment around appropriate automation boundaries.
• Strong software engineering capabilities and experience building production-grade security tooling, automation, or systems rather than only operating existing security platforms.
• Proven experience owning a security program or capability roadmap end to end, including planning, prioritization, sequencing, and delivery across multiple quarters.
• Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and corresponding incident response approaches.
• Experience designing and facilitating tabletop exercises, gamedays, or comparable security readiness programs and converting findings into concrete improvements.
• Strong written and verbal communication skills, including the ability to explain technical risks, decisions, and trade-offs to senior leaders and cross-functional stakeholders.
• Experience mentoring engineers or otherwise elevating the technical and investigative capabilities of a security team.
• Ability to build scalable systems rather than relying primarily on repeated manual processes, with a thoughtful approach to applying AI and automation to improve security outcomes.
• Strong incident command skills, including the ability to bring structure to ambiguous situations, make sound decisions with incomplete information, and maintain composure during high-pressure events.
• Demonstrated ownership of complex initiatives from strategy through execution, including defining priorities, navigating dependencies, and delivering against long-term maturity goals.
• Ability to operate as an independent technical partner to leadership and cross-functional teams while representing priorities, risks, and trade-offs effectively.
• Commitment to continuous improvement, open learning, and using incidents and failures to strengthen systems and practices.

Benefits:

• U.S.-based annual base salary of $192,000–$278,000.
• Immediate access to health and dental benefits.
• 401(k) program and other employee benefits.
• Equity grant.
• Eligibility for applicable incentive programs.
• Generous paid time off policy.
• Maternity and parental leave top-up programs.
• Retirement matching program.
• Paid volunteer days.
• Peer-to-peer recognition program.
• Free access to the company's password management service.
• Remote-first work environment within the United States, with travel for in-person team, department, customer, or industry engagements as required.
• Professional growth opportunities in a fast-paced environment focused on security engineering, AI, incident response, and continuous learning.
• Accommodation support is available throughout the recruitment process.