Remote Security Incident Lead for SaaS

Atlassian; Washington (District of Columbia); On-site; USD 221,000 - 289,000; Full time

Benefits offered by this job

Health & wellbeing

Volunteer days

Equity options

Job summary

Atlassian supports flexible work locations, allowing Atlassians to work from an office, from home, or in a hybrid arrangement. The Incident Response Lead will manage high-impact security incidents in a cloud environment, coordinating teams across Detection, Security Engineering, Legal, and executive leadership in the US region.

You will drive investigations, containment, recovery, and post-incident reviews, focusing on structured decision-making and timely communications.

Qualifications

• Experience leading complex, multi-stakeholder security incidents in SaaS/cloud/enterprise environments.
• Proven ability to develop and mentor senior security engineers, responders or tech leads.
• Strong executive communication skills to translate technical info into clear decisions, risks and next steps.
• Experience improving incident response programs through metrics, retrospectives, process design, and readiness exercises.

Responsibilities

• Lead or coordinate high-impact security incidents with urgency and structure.
• Directly manage a team of 5–8 in the US region; coach responders and practitioners.
• Drive investigation, containment, recovery and follow-through with cross-functional partners.
• Lead adoption of investigative AI tools and automation to reduce toil and improve triage and consistency.
• Support regulated environments and formal incident reporting obligations.

Skills

Incident leadership

Executive communication

Cross-team collaboration

Metrics & post-incident reviews

Playbooks & automation

Staff coaching & development

Tools

Investigation tooling

Log analysis

Job description

Atlassian supports flexible work locations, allowing Atlassians to work from an office, from home, or in a hybrid arrangement. The Incident Response Lead will manage high-impact security incidents in a cloud environment, coordinating teams across Detection, Security Engineering, Legal, and executive leadership in the US region.

You will drive investigations, containment, recovery, and post-incident reviews, focusing on structured decision-making and timely communications.