AI Incident Response Lead

Arcitix Technologies; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Arcitix Technologies in San Francisco is seeking an AI Incident Response Lead to manage critical engagements involving AI system compromises. The successful candidate will coordinate with engineering teams during incidents, perform forensic analysis, and develop incident-response playbooks.

A Bachelor's degree is required, alongside at least 7 years of experience in incident response or digital forensics. This is an opportunity to lead initiatives that enhance the resilience of AI practices across the organization.

Qualifications

• 7+ years of incident response or digital forensics experience.
• Demonstrated ability to lead IR engagements independently.
• Familiarity with cloud and container forensics is advantageous.

Responsibilities

• Lead incident-response engagement for AI and LLM systems.
• Coordinate with client engineering teams during active incidents.
• Develop AI incident-response playbooks and procedures.

Skills

Incident response

Digital forensics

Exposure to AI/LLM systems

Forensics and root-cause analysis

Public speaking

Education

Bachelor's degree

Master's degree

Tools

GCIH certification

GCFA certification

Job description

Lead response to AI-system compromise — prompt injection, model abuse, data leakage — coordinating containment and recovery.

About the role

The AI Incident Response Lead runs our most serious engagements end to end. When a client's AI system is compromised — through prompt injection, model abuse, agent hijacking, or data leakage — you lead containment, forensics, root-cause analysis, and recovery.

You will be the calm, senior voice in the room, coordinating with client engineering and briefing executives while the team works the problem. You will also turn each incident into reusable playbooks that strengthen the whole practice.

Key Responsibilities

• Lead incident-response engagements involving AI and LLM systems
• Coordinate with client engineering teams during active incidents
• Perform forensics and root-cause analysis on AI compromises
• Develop AI incident-response playbooks and procedures
• Deliver executive briefings on incident status and findings

Requirements

• Bachelor's degree required; Master's preferred
• 7+ years of incident response or digital forensics experience
• Exposure to AI/LLM systems and their failure modes
• GCIH, GCFA, or equivalent certifications
• Demonstrated ability to lead IR engagements independently

Nice to have

• Experience building or maturing an IR function
• Familiarity with cloud and container forensics
• Public speaking or incident-debrief experience