Security Incident Commander & Response Leader (Remote)

Rippling, Inc.; United States; Remote; USD 120,000 - 140,000; Full time

Job summary

Nexcess is seeking an Information Security Incident Manager to lead the organization’s Security Incident Management program across infrastructure and platform operations. You will be the central coordinator during incidents, service disruptions, and high-severity events, driving response, communication, and accountability.

You will partner with Infrastructure, Platform Engineering, Security, Support, and Leadership to improve incident response maturity through post-incident reviews, IOAR

Qualifications

• 4+ years of experience in IT, infrastructure operations, hosting operations, platform reliability, or related technical environments.
• Bachelor’s Degree in Information Technology, Business Administration, or related field, or equivalent practical experience.
• Proven history of Linux Incident Response & Forensics.
• Ability to perform Advanced Log Analysis & System Auditing.
• Ability to perform Network & Socket Triage.
• Experience managing escalations and coordinating cross-functional technical teams.
• Excellent written and verbal communication skills.
• Strong organizational, analytical, and problem-solving abilities.

Responsibilities

• Lead and coordinate operational incident response activities for infrastructure, platform, hosting, and customer-impacting events.
• Serve as Security Incident Commander or facilitate incident coordination during high-severity operational events.
• Ensure incident response processes are consistently followed including identification, escalation, engagement, assessment, resolution, communication, and post-mortem review.
• Facilitate operational bridge calls, escalation management, stakeholder coordination, and incident tracking activities.
• Monitor active incidents to ensure accountability, urgency, and proper escalation procedures are maintained.
• Assist with after-hours escalation coordination as necessary during major operational events.
• Contribute to IOAR meetings and post-mortem reviews.
• Analyze incidents, outages, and trends to identify recurring failures and improvement opportunities.
• Develop and maintain incident response documentation, procedures, escalation workflows, and governance standards.
• Produce monthly reporting related to incidents, service disruptions, response metrics, and operational trends.
• Partner with operational leadership to improve incident response maturity, communication standards, and accountability.
• Communicate effectively with technical and non-technical stakeholders during high-pressure events.

Skills

Incident response

Log analysis

Network triage

Communication skills

Cross-functional coordination

Education

Bachelor’s degree or equivalent experience

Tools

Linux

Monitoring/Observability tools

Job description

Nexcess is seeking an Information Security Incident Manager to lead the organization’s Security Incident Management program across infrastructure and platform operations. You will be the central coordinator during incidents, service disruptions, and high-severity events, driving response, communication, and accountability.

You will partner with Infrastructure, Platform Engineering, Security, Support, and Leadership to improve incident response maturity through post-incident reviews, IOAR