Head of Security Incident Response & Automation

Coinscapture; Northern (KY); Hybrid; USD 192,000 - 278,000; Full time

Benefits offered by this job

Health benefits

Dental benefits

401k

RSU program

Paid time off

Equity grant

Job summary

1Password seeks a Manager, Security Incident Response to lead a team of incident responders and security builders. You will guide incident response maturity and scale automation with AI-assisted tooling while ensuring effective handling of complex, high-severity events.

This role blends strong people leadership with technical depth, shaping response strategy and partnering across functions to protect the product trusted by millions. Remote-friendly within the US and Canada.

Qualifications

• 5+ years of security incident response experience with leadership experience.
• Experience building or scaling incident response automation and AI-assisted workflows.
• Strong ownership, delegation, and outcome measurement.
• Ability to manage high-pressure incidents with calm and clarity.
• Knowledge of cloud-native and SaaS security and threat response.

Responsibilities

• Build, lead, and develop a team of incident responders and security builders.
• Define incident response roadmap and mature automation and AI tooling.
• Oversee detection, triage, containment, remediation, and post-incident learning.
• Partner with cross-functional teams to improve detection and response.
• Escalate and manage complex or high-severity incidents and track metrics.

Skills

Incident response

Automation tooling

AI workflows

Leadership

Communication

Cloud security

Strategic planning

Risk management

Team development

Job description

1Password seeks a Manager, Security Incident Response to lead a team of incident responders and security builders. You will guide incident response maturity and scale automation with AI-assisted tooling while ensuring effective handling of complex, high-severity events.

This role blends strong people leadership with technical depth, shaping response strategy and partnering across functions to protect the product trusted by millions. Remote-friendly within the US and Canada.