Senior Incident Commander, Detection & Response

Anthropic Limited; San Francisco, Northern (CA, KY); Hybrid; USD 290,000 - 365,000; Full time

Job summary

Anthropic in San Francisco is seeking a senior Technical Program Manager to own and evolve incident management within the Detection & Response (D&R) team. You will drive the incident lifecycle from detection to post-incident review and coordinate across engineering, security, infrastructure, and product teams.

You will not only manage incidents but also ensure that learnings translate into systemic fixes, build playbooks, and measure KPIs to reduce risk and improve security operations.

Qualifications

• 7+ years of technical program management or security operations experience.
• Experience leading incident response programs in tech companies, with high-growth or security focus.
• Ability to translate incident data into cross-functional actions and improvements.
• Comfort with on-call responsibilities and leading during high-severity events.

Responsibilities

• Own end-to-end D&R incident management, including detection workflows and remediation tracking.
• Act as incident commander for security incidents with cross-functional coordination.
• Define incident commander rotations to ensure clear ownership across teams.
• Lead post-incident reviews and ensure learnings are captured and acted upon.
• Develop D&R playbooks, runbooks, and training materials and keep them updated.

Skills

Incident management

Cross-functional leadership

Security incident response

Executive communication

Job description

Anthropic in San Francisco is seeking a senior Technical Program Manager to own and evolve incident management within the Detection & Response (D&R) team. You will drive the incident lifecycle from detection to post-incident review and coordinate across engineering, security, infrastructure, and product teams.

You will not only manage incidents but also ensure that learnings translate into systemic fixes, build playbooks, and measure KPIs to reduce risk and improve security operations.