Senior Incident Commander - Detection & Response

Anthropic; Seattle (WA); Hybrid; USD 290,000 - 365,000; Full time

Job summary

Anthropic is seeking a Technical Program Manager to own and evolve incident management within the Detection & Response (D&R) team. You will drive the incident lifecycle from detection and triage through containment, remediation, and post-incident review, ensuring improvements after every event.

You will partner with engineering, security, infrastructure, and product teams to define processes, establish KPIs, and scale response capabilities in a fast-growing security-conscious environment.

Qualifications

• 7+ years in technical program management, incident management, or security operations.
• Experience building and scaling incident response programs at tech companies.
• Ability to translate incident data into cross-functional improvements.

Responsibilities

• Own the end-to-end D&R incident management program, including detection workflows and remediation tracking.
• Serve as incident commander for security incidents, coordinating with executives, engineering, and legal.
• Establish incident commander rotations for incidents of varying severity.
• Drive post-incident accountability with action items across teams.
• Gather and report incident trends to surface systemic risks and root causes.
• Translate trend analysis into cross-functional initiatives and preventive fixes.
• Lead post-mortems and ensure learnings are socialized across the organization.
• Develop and maintain D&R playbooks, runbooks, and training materials.

Skills

Incident management

Security operations

Incident commander

Cross-functional collaboration

Data analysis

Education

Bachelor's degree

Job description

Anthropic is seeking a Technical Program Manager to own and evolve incident management within the Detection & Response (D&R) team. You will drive the incident lifecycle from detection and triage through containment, remediation, and post-incident review, ensuring improvements after every event.

You will partner with engineering, security, infrastructure, and product teams to define processes, establish KPIs, and scale response capabilities in a fast-growing security-conscious environment.