Incident Management Engineer Jobs

Celonis is the trusted platform to industrialize Enterprise AI. At our core is the Celonis Context Model — which combines process data, business knowledge, and intelligence into a living digital twin of the enterprise that AI can actually understand, turning AI's operational blind spots into operational clarity. World's leading companies trust Celonis and its global ecosystem of partners to make their AI agents, people, systems, and processes work together, achieving transformational outcomes. We believe there's a massive opportunity to unlock global productivity and sustainability by giving AI the context to understand how every business process really works. Join our mission to make processes work for people, companies, and the planet. About the Role Celonis is seeking a Manager of Global Cyber Defense to lead our Security Operations (SecOps) and Incident Response teams. In this global leadership position, you will be the primary architect and custodian of the strategies, tools, and policies that safeguard Celonis’s enterprise data, corporate infrastructure, and cloud-native environments. Your team will ensure the security and integrity of our global execution management platform, protecting the critical business processes of our customers. By designing and deploying advanced technical controls, you will ensure that emerging cyber threats are automatically detected, isolated, and neutralized. As a core security leader, you will collaborate across Engineering, Product, and IT to build a resilient, security-first culture, integrating deep threat insights directly into our continuous software development lifecycle. While this is a management role, Celonis values expert practitioners . You should be ready to lead by example, bring deep technical mastery of modern security ecosystems, and blend proprietary and open-source tooling into a seamless, next-generation global defense strategy. This position reports VP of Information Security. What You Will Do in This R

About the Team DoorDash Labs is an independent team within DoorDash. We're hiring an Associate Operations Manager to help lead a team working on robotics solutions solving real business problems. If you have a passion for applying robotics solutions to a service loved by millions of people, then we want to talk to you! About the Role This role acts as an Associate Operations Manager at DoorDash Labs. You will ensure that DoorDash Labs executes operations efficiently and maximizes operations to its full potential. You will report to the Operations Manager, CA on our robotics team in our DoorDash Labs organization. You will be 100% in-office and in-field throughout the Bay Area with some limited travel potential to other new markets if the need arises. You’re excited about this opportunity because you will… Rigorously tracking daily KPIs and work with all sides of our operations to maximize our output and commercial availability of supply Establish strong relationships and followership with the Operations Manager, team leads and a co-located service team, motivating the whole team to work as one Incorporate, adopt and refine daily and weekly processes for the management of real-time operations, working closely with other leaders Build strong relationships with cross-functional partners, including remote assistance, technical program management, facilities, engineering and many other key stakeholders to provide an understanding of the current state of operations and resource allocation Contribute with creative operational solutions to complex and ambiguous technical problems, unlocking the next big autonomy bet Provide onsite leadership and expertise for incident response, in the case things don’t match expectations and need guidance and leadership Work effectively in gray space, bringing clarity to uncertainty, to enable tactical and strategic decision making and push the program forward! We’re excited about you because you have… 6+ years of ex

About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a highly analytical, systems-oriented Director of Security Operations to drive the planning, forecasting, deployment, and optimization of hardware infrastructure across our global cloud storage platform. Role Overview The Director of Security Operations leads the organization's day-to-day cybersecurity operations across traditional and AI-enabled environments. Reporting to the CISO, the Director leads Security Operations while partnering closely with the Director of Security Architecture & Engineering. This is a hands-on technical leadership role requiring experience implementing and operating security controls as well as leading teams, incidents, and security programs. Key Responsibilities Lead security monitoring, incident response, threat hunting, security analytics, vulnerability management, adversary emulation, identity security, and operational resilience. Establish operational priorities, service objectives, metrics, playbooks, and processes based on organizational risk and business needs. Serve as inciden

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: We are seeking a highly skilled End User Service Lead to manage frontline IT support and ensure seamless technology experiences for end users across the Jakarta location. This role is responsible for overseeing the day-to-day service operations, ensuring high-performance incident resolution, and driving continuous improvement initiatives. The successful candidate will lead a team of End User Service Engineers, implementing best practices in IT service management (ITSM), automation, and compliance while fostering a customer-centric support culture. What you'll be doing: Team Leadership & Line Management Lead and manage the End User Service team, providing mentorship, development opportunities, and performance oversight for EUS Engineers and Senior EUS Engineers. Set clear goals, expectations, and KPIs, ensuring alignment with IT service objectives. Conduct regular performance reviews, coaching engineers on technical skills, troubleshooting efficiency, and customer service effectiveness. Optimize workforce allocation, balancing ticket queue workload and proactive IT support initiat

Skeletons, lasers, tattoo buses — the Torq brand grabs attention like nothing else in cybersecurity. And we're growing like crazy, backed by Series D funding, 200% employee growth, and 300% revenue growth. Fueling Torq's momentum is our game-changing AI SOC platform, backed by a team and culture that makes Torq one of Forbes' Best Startup Employers in America, and a Business Insider 'startup to bet your career on'. Life at Torq is all gas, no brakes. We're a team of relentless, collaborative go-getters pushing the boundaries of what's possible for security automation. Every role is an essential driver of Torq's success as the AI-native autonomous SecOps platform of choice for security teams across the Fortune 500. About the Role We are looking for an AI-savvy Product Manager to join Torq as we continue expanding and exploring the hottest intersection in the security market: agentic AI and SecOps. The ideal candidate will have both experience in at least one SOC-adjacent domain (threat intelligence, SecOps, hunting, incident response…) and strong understanding of agentic AI. You’ll own parts of Torq’s agentic platform: where agents are managed, how they interact with users, and how they can help SOCs to reduce system-critical metrics and overall threat exposure. What You’ll Be Doing Lead critical parts of Torq’s agentic platform to help drive forward adoption and innovation across the full lifecycle - from UX to prompt engineering Become an expert in Torq’s AI SOC offering and in Torq’s Platform as a whole Represent the customer’s voice inside Torq to ensure we’re staying on the critical path Work closely with Torq’s top-notch engineering teams to deliver product capabilities and stay on top of state-of-the-art AI trends Analyze product data - from classic product analytics to AI evaluations of usage patterns - to proactively bubble up user needs or issues The Ideal Candidate Has 3-5 years of product management experience Possesses a strong understanding

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Senior Technical Account Manager (TAM) to own the post-sales technical relationship for a portfolio of our largest enterprise customers, taking it over from the Solutions Architect (SA) at deal close. Your focus is continuity: customers renew the annual TAM engagement because their technical outcomes improve each year. This role requires travel to customer offices 4 to 8 times a year. What you'll do Own the post-sales technical relationship and the annual TAM renewal for a portfolio of enterprise accounts, running a weekly check-in, monthly review, quarterly business review (QBR), and annual roadmap workshop for each Lead incident follow-through when an escalation or a pattern of incidents emerges: run the post-mortem, find the architectural root cause, own the remediation roadmap, and respond to priority 1 and 2 escalations within 4 business hours Deliver proactive architectural reviews, technical risk mapping, cost and usage optimization, and pre-launch readiness assessments Scope hands-on engineering work for Forward Deployed Engineers (FDEs) and audits for Professional Services, and track their outcomes into the customer's technical roadmap, without shipping production code yourself Relay customer technical needs to Product, Engineering, and Support, and hold those teams to the commitments you have made to your customers What you need 5+ years in customer-facing technical roles at a platform, infrastructure, or developer tools company, such as technical account management, solutions architecture, developer s

About the Team DoorDash Labs is an independent team within DoorDash. We're hiring an Associate Operations Manager to help lead a team working on robotics solutions solving real business problems. If you have a passion for applying robotics solutions to a service loved by millions of people, then we want to talk to you! About the Role This role acts as an associate operations manager at DoorDash Labs. You will ensure that DoorDash Labs executes operations efficiently and maximizes operations to its full potential. You will report to the General Manager on our robotics team in our DoorDash Labs organization. You will be 100% in-office and in-field throughout the Greater Salt Lake Area with some limited travel potential to other new markets if the need arises. You’re excited about this opportunity because you will… Rigorously tracking daily KPIs and work with all sides of our operations to maximize our output and commercial availability of supply Establish strong relationships and followership with the general manager, operations team managers and a co-located service team, motivating the whole team to work as one Incorporate, adopt and refine daily and weekly processes for the management of real-time operations, working closely with other leaders Build strong relationships with cross-functional partners, including remote assistance, technical program management, facilities, engineering and many other key stakeholders to provide an understanding of the current state of operations and resource allocation Contribute with creative operational solutions to complex and ambiguous technical problems, unlocking the next big autonomy bet Provide onsite leadership and expertise for incident response, in the case things don’t match expectations and need guidance and leadership Work effectively in gray space, bringing clarity to uncertainty, to enable tactical and strategic decision making and push the program forward! We’re excited about you because you ha

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Senior Associate, FCM The FCM Operations team supports Coinbase Financial Markets, Inc. across US Futures, Prediction Markets, and Options by managing back-office operations including trade flow management, position management, margin monitoring, regulatory reporting, and business analytics. As a Senior Associate, FCM, you'll own exception management and operational readiness for new product launches, ensuring our derivatives infrastructure scales reliably while meeting regulatory expectations. What you'll do: Own exception management across cash, positions, trades, and margin, including triage, investigation, resolution, and implementation of durable fixes Lead operational readiness for new product launches, covering UAT/test case design, playbooks, cutover plans, and post-launch stabilization Partner with Product, Risk, Compliance, Accounting, and Engineering to design processes, controls, and reporting that scale and meet regulatory expectations Establish monitoring and exception reporting frameworks (SLAs, KPIs, dashboards) and run incident triage with clear escalation paths Drive root cause analysis and post-mortems, translating learnings into product and process improvements Identify and implement automation and tooling to reduce operational friction and manual work Required Skills and Experience: 5+ years in financial services or fintech operations with FCM, b

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Senior Technical Account Manager (TAM) to own the post-sales technical relationship for a portfolio of our largest enterprise customers, taking it over from the Solutions Architect (SA) at deal close. Your focus is continuity: customers renew the annual TAM engagement because their technical outcomes improve each year. This role requires travel to customer offices 4 to 8 times a year. What you'll do Own the post-sales technical relationship and the annual TAM renewal for a portfolio of enterprise accounts, running a weekly check-in, monthly review, quarterly business review (QBR), and annual roadmap workshop for each Lead incident follow-through when an escalation or a pattern of incidents emerges: run the post-mortem, find the architectural root cause, own the remediation roadmap, and respond to priority 1 and 2 escalations within 4 business hours Deliver proactive architectural reviews, technical risk mapping, cost and usage optimization, and pre-launch readiness assessments Scope hands-on engineering work for Forward Deployed Engineers (FDEs) and audits for Professional Services, and track their outcomes into the customer's technical roadmap, without shipping production code yourself Relay customer technical needs to Product, Engineering, and Support, and hold those teams to the commitments you have made to your customers What you need 5+ years in customer-facing technical roles at a platform, infrastructure, or developer tools company, such as technical account management, solutions architecture, developer s

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Threat Intelligence Engineer is responsible for engineering, operating, and continuously improving WPP’s cyber threat intelligence platforms, integrations, and enrichment pipelines. This role focuses on how threat intelligence is ingested, processed, correlated, and operationalised at scale across security operations. The position is an engineering-led individual contributor role with no people management responsibilities. What you'll be doing: Engineer and maintain threat intelligence platforms and data sources. Design ingestion pipelines for external, internal, and open-source intelligence feeds. Maintain centralised repositories for indicators, threat actor artefacts, and metadata. Integrate threat intelligence into SIEM, SOAR, EDR/XDR, email, identity, and cloud tooling. Build enrichment pipelines linking incidents to threat actors, campaigns, and TTPs. Partner with Automation Engineering to ensure intelligence is automation-first. Provide engineered intelligence support to Incident Response during active incidents. Enable Detection Engineering and Threat Hunting with

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase is looking for a Senior Manager, Security Audit to lead the Internal Audit team's global coverage of information security, cybersecurity, and infrastructure/application security. Reporting to the Global Head of Internal Audit, you'll own the security audit portfolio, spanning identity and access management, threat detection, incident response, cloud security, application security, and crypto-native controls (wallets, cold storage, key management), while managing a small team and carrying your own book of complex audits. What you'll do: Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity. Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions. Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board. Drive proactive i

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role We are seeking a Staff Vulnerability Management Engineer to lead the most complex technical work in SoFi’s Vulnerability Management program. You will design and build scalable systems that identify, enrich, prioritize, route, and track vulnerabilities across applications, cloud and infrastructure, containers, software supply chains, and specialized hardware or firmware surfaces. This is a hands-on engineering role with broad technical influence: you will write production code, make architecture decisions, establish vulnerability management standards, and improve how teams understand and reduce vulnerability risk. You will partner with Engineering, Infrastructure, SRE, Compliance, Legal, and business stakeholders to accelerate remediation while protecting engineering velocity and customer trust. You will also serve as a senior technical responder for embargoed disclosures and zero-day events, lead root-cause analysis for high-impact vulnerability incidents, and mentor engineers. The ideal candidate combines deep vulnerability management expertise with strong software engineering judgment, systems thinking, and a bias for durable, measurable outcomes. What you’ll do Lead high-complexity vulnerability management initiatives and make architecture decisions for assigned program areas, from detecti

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

We are looking to speak to candidates who are based in Bengaluru for our hybrid working model. Responsibilities Successfully co-ordinate with a global team of Cloud Operations Engineers who are tasked with ensuring our uptime guarantees to our Atlas customer base Help scale the worldwide Cloud Operations Engineering team with the strategic implementation of new processes and tools Assist in scoping, designing and deploying systems that reduce Mean Time to Resolve for customer incidents Monitor and detect emerging customer-facing incidents on the Atlas platform; assist in their proactive resolution Automate routine monitoring and troubleshooting tasks Diagnose live incidents, differentiate between platform issues versus usage issues, and take the next steps toward resolution Cooperate with our product management and cloud engineering organizations by identifying areas for improvement in the management applications powering the Atlas infrastructure Inform executive leadership and escalation management personnel of major outages Coordinate and participate in a weekly on-call rotation, where you will handle short term customer incidents (from direct surveillance or through alerts via our Technical Services Engineers) Requirements Experience with being an on call DevOps, SRE, or Cloud Operations engineer (at least 8 years) Expertise with Linux system administration, configuration, troubleshooting Experience in monitoring, system performance data collection and analysis, and reporting Expertise with networking technologies like DNS, TCP/IP, etc Knowledge of database operations and concepts. Familiarity with Amazon Web Services and other Cloud infrastructure platforms (e.g. GCP, Azure) We need intermediate proficiency in scripting or coding A CS/CE degree or equivalent experience At least 1 of the following programming languages: Java, Go, Python, Javascript A keen interest in learning new things Special requirements Willingness to work in 1st Shift (7:30 am IST to 3:30 pm