Senior Incident Response Leader

Ancestry; United States; Hybrid; USD 132,000 - 166,000; Full time

Benefits offered by this job

Bonus eligibility

Equity

Comprehensive benefits

Job summary

Ancestry seeks a battle-tested Manager, Incident Response to lead and mature our IR team. You will mentor responders, threat hunters, and forensic analysts while driving strategic improvements across processes and automation.

You will guide crisis management, translate complex findings for leadership, and push for rapid containment in a fast-paced environment. This role offers a flexible US work model and competitive compensation.

Qualifications

• 3+ years of experience directly managing incident response professionals.
• 6+ years of hands-on incident response, DFIR and blue team operations.
• Experience mapping detections to MITRE ATT&CK framework.

Responsibilities

• Lead IR engineers with mentorship and psychological safety.
• Oversee end-to-end incident handling (triage, containment, forensics, eradication, recovery).
• Establish and analyze KPIs (MTTD, MTTR, true/false positives) for leadership updates.
• Coordinate during major incidents and translate findings into risk summaries.
• Lead post-incident reviews to drive detections and process improvements.
• Drive runbooks and automation to shorten containment timelines.

Skills

People Management

Crisis Management

Leadership

Threat Hunting

Communication

AI Familiarity

Education

GIAC Certifications

CISSP

CISM

Tools

Elasticsearch

AWS

SIEM

SOAR

Job description

Ancestry seeks a battle-tested Manager, Incident Response to lead and mature our IR team. You will mentor responders, threat hunters, and forensic analysts while driving strategic improvements across processes and automation.

You will guide crisis management, translate complex findings for leadership, and push for rapid containment in a fast-paced environment. This role offers a flexible US work model and competitive compensation.