Senior Incident Response Lead: Cloud & Forensics

WHOOP; Boston (MA); On-site; USD 130,000 - 170,000; Full time

Job summary

WHOOP is seeking an Incident Response Lead to drive security incident response across the enterprise from our Boston office. You will serve as the primary internal escalation point and hands-on responder for security incidents, partnering with the 24x7 SOC and cross-functional stakeholders to investigate, contain, and remediate threats.

This highly technical individual contributor role offers ownership across Security, IT, GRC, and Legal, with responsibilities spanning playbooks, incident

Qualifications

• 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations.
• Experience leading investigations in complex, cloud-native environments.
• Hands-on expertise with SIEM, EDR, and cloud security monitoring.
• Experience with external SOC or MDR providers.
• Knowledge of MITRE ATT&CK and its application to detection and response.
• Experience supporting breach response obligations under HIPAA, PCI, or similar regulations.
• Excellent communication skills coordinating cross-functional stakeholders under pressure.
• Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent).

Responsibilities

• Lead hands-on incident response activities, serving as the primary internal escalation point for security events
• Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents
• Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts
• Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed
• Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows
• Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked
• Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness
• Partner with GRC and Legal to support breach impact assessments and regulatory notification processes
• Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems
• Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives
• Participate in an on-call escalation rotation to provide after-hours incident leadership when required

Skills

Incident response

Threat detection

Digital forensics

SIEM

EDR

Cloud security monitoring

Cross-functional communication

MITRE ATT&CK

Education

Bachelor’s degree or relevant certifications

Tools

SIEM platforms

EDR tools

Cloud security monitoring tools

Job description

WHOOP is seeking an Incident Response Lead to drive security incident response across the enterprise from our Boston office. You will serve as the primary internal escalation point and hands-on responder for security incidents, partnering with the 24x7 SOC and cross-functional stakeholders to investigate, contain, and remediate threats.

This highly technical individual contributor role offers ownership across Security, IT, GRC, and Legal, with responsibilities spanning playbooks, incident