Lead Incident Response Engineer: Cloud & Identity

A16z; San Francisco (CA); Hybride; USD 295 000 - 347 000; Plein temps

Avantages offerts par ce poste

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

401K plan

Vacation

Sick leave

Résumé du poste

Andreessen Horowitz is seeking a Lead Engineer, Incident Response to build and guide a16z's detection and response program. You will investigate incidents, author detections, and drive automation while growing a team of engineers.

You will shape detection across cloud, SaaS, identity, and endpoints and collaborate with Legal, Compliance, IT, and Finance. The role requires hands-on incident work, leadership, and strong communication with senior stakeholders.

Qualifications

• 9+ years in incident response or detection and response with cloud focus (AWS/GCP).
• Experience managing security engineers with hands-on leadership.
• Track record leading detection and response programs with measurable improvements.
• Experience handling high-stakes incidents across cloud, SaaS, identity, and endpoints.
• Strong Python skills and security automation experience.

Responsabilités

• Set the detection and response roadmap and measure coverage, alert quality, and response effectiveness.
• Lead and develop engineers through coaching, feedback, performance management, and technical reviews.
• Develop triage through containment, eradication, and recovery playbooks and coordinate major incidents.
• Design and improve SIEM architecture and security logging across cloud, identity, and endpoints.
• Run hypothesis-driven threat hunts and translate findings into new detections.
• Lead incident response coordination with system owners and vendors during major incidents.
• Maintain incident postmortems and drive remediation actions with cross-functional teams.
• Participate in on-call rotation within the Security team.

Connaissances

Incident response

Detection engineering

Python

Cloud security (AWS/GCP)

Leadership / people management

Threat hunting

Communication with stakeholders

Automation / playbooks

Formation

GCIH or equivalent incident response certification

Outils

SIEM

KQL

Sigma

SOAR

EDR

MITRE ATT&CK

Description du poste

Andreessen Horowitz is seeking a Lead Engineer, Incident Response to build and guide a16z's detection and response program. You will investigate incidents, author detections, and drive automation while growing a team of engineers.

You will shape detection across cloud, SaaS, identity, and endpoints and collaborate with Legal, Compliance, IT, and Finance. The role requires hands-on incident work, leadership, and strong communication with senior stakeholders.