Senior Incident Commander, 24/7 IR Lead

Fluidstack; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Retirement plan

Generous PTO

Job summary

Fluidstack is seeking a Senior Security Incident Commander to lead incident responses and maintain 24/7 coverage for the US region. You will own escalation, drive cross-functional communications, and build a high-performing on-call team across security, infrastructure, and facilities.

You will manage executive-facing updates, regulatory disclosures, and post-incident reviews to close gaps and strengthen defenses in a fast-paced, AI-focused data-center environment.

Qualifications

• Led material incidents end to end as a senior incident commander in organizations with sophisticated threat actors.
• Managed and grew a team of senior responders while staying in the on-call rotation.
• Designed or ran a 24/7 on-call program: coverage models, rotation discipline, SLAs, and escalation chains.
• Able to switch between technical containment and executive, legal, or customer-facing communications during incidents.
• Made disclosure-grade calls under regulatory and customer reporting clocks.
• Built operating relationships across security, infrastructure, and facilities teams, handling cross-boundary incidents.
• Has opinions on humane on-call programs and effective IR processes, and is ready to build one.

Responsibilities

• Lead incidents as a senior incident commander in the on-call rotation.
• Own 24/7 coverage model, rotation discipline, and response SLAs for the US region.
• Build and develop a team of senior incident responders and establish on-call expectations.
• Drive executive, legal, and customer communications during incidents, including regulated reporting and disclosure timelines.
• Oversee joint operating relationships with Physical Security and Data Center Operations for cross-domain incidents.
• Run post-incident reviews and drive remediation across detection, response, and infrastructure.
• Define the agentic triage layer and feed learnings back to detection engineering and threat intel.

Skills

Incident response

On-call management

Team leadership

Executive communications

Regulatory reporting

Job description

Fluidstack is seeking a Senior Security Incident Commander to lead incident responses and maintain 24/7 coverage for the US region. You will own escalation, drive cross-functional communications, and build a high-performing on-call team across security, infrastructure, and facilities.

You will manage executive-facing updates, regulatory disclosures, and post-incident reviews to close gaps and strengthen defenses in a fast-paced, AI-focused data-center environment.