Incident Response Manager Jobs

The IR Manager will work closely with the SOC team and report directly to the Head of Cybersecurity Operations. This role is responsible for managing the lifecycle of security incidents, ensuring investigation, response, and recovery, while driving continuous improvements in incident response processes and playbooks. Source: Adani Group | Job ID: 55724

The Incident and Escalation Management team (IEM) is part of Datadog's Global Support Engineering (GSE) organization. IEM exists to continuously improve Datadog's overall customer experience during incidents and other critical moments. We're looking for experts with a background in incident management and escalation handling to provide fast incident response, clear ownership, and calm, confident communication for our global customer base. In this individual contributor role, you will play a key part in customer communication, technical engagement, and incident management for our global customers. You will also implement processes and automations, use the same incident and case management tools we build for our customers, and help shape how they evolve. At Datadog, we place value in our office culture — the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Drive incidents and escalations to resolution from start to finish, including triage, coordination with our support, engineering and product teams. Own the response and keep customers and internal teams informed throughout. Independently coordinate cross-functional stakeholders through complex incidents and escalations, making the call on prioritization, response strategy, and when to pull in additional teams or leadership. Own communications during active incidents, including sensitive, large-scale, and publicly visible events, adapting the message for customers, internal teams, and leadership. Lead projects that deliver operational improvements to how IEM detects, manages, and communicates during incidents and escalations as Datadog and its products evolve. Create, maintain, and improve incident and escalation documentation, runbooks, and training materials, and lead retrospectives that turn individual incidents into durable process cha

The Incident and Escalation Management team (IEM) is part of Datadog's Global Support Engineering (GSE) organization. The purpose of IEM is to continuously improve Datadog's overall customer experience during incidents and critical moments. Datadog Global Support Engineering (GSE) is looking for experts with a background in Incident Management and Escalations handling to join our team to provide fast incident response and stakeholder ownership. In this position, you will play a role in providing communication, technical engagement and incident management for our global customers. You will also implement processes based on the lessons learned from each incident to limit further occurrence. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Drive the resolution of incidents and escalations while providing response and/or management to customers Design and implement real-time and proactive monitoring of customer's infrastructures Prioritize, manage, and own customer issues from start to finish Monitor and manage communications (sometimes public, sensitive and large scale) during incidents Collaborate with stakeholders across Datadog and its partners worldwide to enhance customer experience Lead projects to deliver operational improvements as Datadog evolves Create and review documentation as well as incident and escalation training Identify and troubleshoot recurring cloud infrastructure issues Hire and mentor stakeholders and peers in incident and escalation management Who You Are: 3+ years demonstrable Incident Manager experience (escalations is a plus) 1+ year of experience in Support, Network, Solutions Architecture, or similar IT role Bachelor’s degree in Computer Science, Information Science/Technology, Engineering or equivalent experience Fa

About this role At Chime, we help our members achieve financial peace of mind. To do this we need features that are highly available and human & technical systems that are resilient. That’s where you come in. You will be a member of our Incident Response team to help Chime improve our readiness, response and drive organizational change from incidents. As an Incident Operations Manager on Chime's Incident Operations team (Platform Engineering), you'll manage incidents end to end: from declaration and coordination, through member communication and member remediation, to review and follow-through. You'll work across Engineering, Product, Member Experience (MX), Core Experience, Risk, Compliance, Legal, and Finance, and lead through influence rather than authority. You'll bring a proactive, solution-oriented mindset and keep the member at the center of every decision. Alongside on-call work, you'll own defined improvement workstreams that make our response better every quarter. In this role, you can expect to: Coordinate incidents end to end. Serve on the incident on-call rotation, including some after-hours coverage on weekends, nights, and holidays. Independently run incidents from declaration to resolution: setting severity, paging the right responders, running the bridge, confirming member impact, and driving mitigation decisions. Help drive communication during incidents. Draft clear, accurate member messages across in-app, push, inbox, email, and support channels; move them through Compliance and Legal approval within severity-based timelines; and keep Support and MX teams equipped with talking points. Drive member remediation to closure . Run the Remediating phase: define workstreams, DRIs, and exit criteria; partner with Data to size the impacted population; coordinate credits and bulk adjustments with Finance, Compliance, and Core Experience Keep stakeholders informed. Deliver timely status reports and sitreps for leadership, and supply impact summaries and

The Incident and Escalation Management team (IEM) is part of Datadog's Global Support Engineering (GSE) organization. IEM exists to continuously improve Datadog's overall customer experience during incidents and other critical moments. We're looking for experts with a background in incident management and escalation handling to provide fast incident response, clear ownership, and calm, confident communication for our global customer base. In this individual contributor role, you will play a key part in customer communication, technical engagement, and incident management for our global customers. You will also implement processes and automations, use the same incident and case management tools we build for our customers, and help shape how they evolve. At Datadog, we place value in our office culture — the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you'll do: Lead the response to our most complex, ambiguous, and high-impact incidents and escalations from start to finish. Set the response strategy, drive cross-functional coordination, and maintain clear ownership through resolution. Navigate competing priorities across multiple critical customer situations, independently assessing business and technical impact and determining the appropriate response and escalation strategy. Represent IEM to regional Support, Sales, and Engineering leadership, building the standing and relationships that let you drive a response when a situation moves faster than process allows. Lead communications during highly sensitive, public, or large-scale incidents, adapting communication strategies for customers, internal leadership, and other stakeholders. Act as a trusted incident and escalation partner across Support, Engineering, Product, and other teams, influencing decisions and driving alignment when ownership or the path to resoluti

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch is looking for a Security Incident Response Engineer to join our SIRT. Reporting to the SIRT Manager, you'll be at the heart of our mission to find, handle, and learn from security incidents across our global platform. We're looking for engineers who thrive coordinating response to emerging issues in information security who are ready to level up our defense. If you're passionate about protecting the Twitch community and solving complex security puzzles, we want to hear from you! You can work from San Francisco, CA; Irvine, CA; or Seattle, WA. You Will: Participate in an on-call rotation that includes your peers on the Security Incident Response Team Qualify reports or alerts of activity as security incidents using clear guidelines that establish what a security incident is Evaluate the potential and realized impact of security incidents to Twitch Analyze threat actor tactics, techniques, and procedures Participate or create information sharing groups; communicate securely and responsibly Write and follow clear procedures so that our work can be accountable, repeated, measured, and improved Communicate with peers and leadership about timeline of a security related event with what potential and realized impact, how we discovered it, and how we're handling it Coordinate security inci

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch is looking for a Security Incident Response Engineer to join our SIRT. Reporting to the SIRT Manager, you'll be at the heart of our mission to find, handle, and learn from security incidents across our global platform. We're looking for engineers who thrive coordinating response to emerging issues in information security who are ready to level up our defense. If you're passionate about protecting the Twitch community and solving complex security puzzles, we want to hear from you! You can work from San Francisco, CA; Irvine, CA; or Seattle, WA. You Will: Participate in an on-call rotation that includes your peers on the Security Incident Response Team Qualify reports or alerts of activity as security incidents using clear guidelines that establish what a security incident is Evaluate the potential and realized impact of security incidents to Twitch Analyze threat actor tactics, techniques, and procedures Participate or create information sharing groups; communicate securely and responsibly Write and follow clear procedures so that our work can be accountable, repeated, measured, and improved Communicate with peers and leadership about timeline of a security related event with what potential and realized impact, how we discovered it, and how we're handling it Coordinate security inci

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch is looking for a Security Incident Response Engineer to join our SIRT. Reporting to the SIRT Manager, you'll be at the heart of our mission to find, handle, and learn from security incidents across our global platform. We're looking for engineers who thrive coordinating response to emerging issues in information security who are ready to level up our defense. If you're passionate about protecting the Twitch community and solving complex security puzzles, we want to hear from you! You can work from San Francisco, CA; Irvine, CA; or Seattle, WA. You Will: Participate in an on-call rotation that includes your peers on the Security Incident Response Team Qualify reports or alerts of activity as security incidents using clear guidelines that establish what a security incident is Evaluate the potential and realized impact of security incidents to Twitch Analyze threat actor tactics, techniques, and procedures Participate or create information sharing groups; communicate securely and responsibly Write and follow clear procedures so that our work can be accountable, repeated, measured, and improved Communicate with peers and leadership about timeline of a security related event with what potential and realized impact, how we discovered it, and how we're handling it Coordinate security inci

RDQ227R1180 While candidates in the listed location(s) are encouraged for this role, candidates in other locations (US based) will be considered. The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for Databricks on Databricks", using our own platform to create near-real-time log analytics, alerting and forensics. You will be an individual contributor on the security Incident Response (IR) team at Databricks, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at Databricks. The impact you will have: You will respond to incidents as part of a distributed 24x7 operations and on-call schedule. You will triage and respond to security events and alerts, ensuring quick and effective containment. You will conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events. You will provide technical leadership and influence team direction. You will develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team. You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews. What we look for: Must have an active or current US GOV Secret clearance eligibility; Top Secret preferred. Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience. Cloud security expertise in at least 1 of AWS, GCP or Azure, a

RDQ327R180 Staff Security Engineer, Incident Response The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for Databricks on Databricks", using our own platform to create near-real-time log analytics, alerting and forensics. You will be an individual contributor on the security Incident Response (IR) team at Databricks, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at Databricks. The impact you will have: You will respond to incidents as part of a distributed 24x7 operations and on-call schedule. You will triage and respond to security events and alerts, ensuring quick and effective containment. You will conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events. You will provide technical leadership and influence team direction. You will develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team. You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews. What we look for: Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience. Cloud security expertise in at least 1 of AWS, GCP or Azure, and proficiency in the others. Proficiency in AI/LLM and agentic capabilities. Prefer experience with building and operating agentic systems in a security setting. Broad security subject ma

The Network & Cloud Cybersecurity Specialist is responsible for securing cloud and network environments, mitigating cyber threats, and ensuring compliance with security frameworks. This role focuses on threat detection, incident response, and implementing best practices to protect enterprise infrastructure. Source: Adani Group | Job ID: 59222

About the Job: We’re looking for an Engineering Manager to lead LaunchDarkly’s Cloud Engineering team, the team responsible for the foundational infrastructure our products and engineering teams depend on. Cloud Engineering owns LaunchDarkly’s AWS accounts and networking, multi-region Kubernetes infrastructure, Terraform and GitOps workflows, CockroachDB operations, disaster-recovery capabilities, and FedRAMP infrastructure posture. The team is small, senior, and recently rebuilt. This is a frontline leadership role for a manager who treats operational health as a top priority, leads calmly through incidents, and creates leverage through software, automation, and reliable paved paths. In your first year, you’ll lead a marquee infrastructure insourcing program from planning through completion. The program’s cost savings will help fund additional team growth, giving you the opportunity to deliver meaningful business impact while strengthening the infrastructure behind LaunchDarkly’s next stage of scale. This role combines people leadership, operational ownership, and technical judgment. You do not need to be the most senior individual contributor in the room, but you should be comfortable partnering with experienced engineers, guiding tradeoffs, and creating an environment where the team can do its best work. Responsibilities: Lead and develop a senior Cloud Engineering team, providing clear expectations, coaching, feedback, performance management, and career-development support. Own the operational health of LaunchDarkly’s cloud infrastructure, including incident response, on-call health, service-level objectives, resilience, and disaster recovery. Launch and deliver a multi-quarter infrastructure insourcing program, including sequencing work, managing dependencies, communicating milestones, and ensuring a successful transition. Guide technical priorities and tradeoffs across AWS infrastructure, networking, multi-region Kubernetes, infrastructure as code, GitOps, dat

Site Maintenance Lead (Roads) manages comprehensive site maintenance operations, ensuring adherence to quality standards and contract specifications. Supervise routine maintenance, incident response, and electrical maintenance to optimize infrastructure reliability and operational efficiency.B120 Source: Adani Group | Job ID: 57240

The Escalation Manager is a critical role within Technical Services. As a member of our global Incident and Escalation Management team, they work internally with our Engineering, Services, Sales and Product Management teams, as well as externally with customers and partners, to coordinate and drive the resolution of critical technical issues and incidents. Transparency is key and is achieved by providing timely and accurate updates to senior management regarding active escalations, as well as important detail on the status of the customer account. Individuals in this role are highly organized, proactive and professional. You are one who excels in fast-paced environments and can assess business impact, mobilize cross-functional teams, and drive technical escalations with urgency and ownership. We are looking for someone who has a customer-focused mindset with excellent communication and expectation-setting abilities. You have a technical background in Support, Services, DevOps, Systems Engineering, or Database environments, and are experienced in incident response or crisis management. You will have strong negotiation and objection-handling skills, along with the ability to deliver concise, actionable reporting for escalations and post-mortem reviews. We are looking to speak to candidates who are based in Dublin for our hybrid working model. Role summary Critical Situation Management is the defining capability of this Escalation Manager role. You will lead MongoDB’s most complex and consequential customer situations, bringing calm, disciplined Incident Command to high-pressure events where technical ambiguity, business risk, and executive scrutiny converge. You will establish command and control, mobilize the right cross-functional responders, and maintain a clear operating rhythm from situation declaration through mitigation, recovery, closure, and follow-through. At the same time, you will directly manage customer confidence and executive expectations, translating

The Network & Cloud Cybersecurity Specialist is responsible for securing cloud and network environments, mitigating cyber threats, and ensuring compliance with security frameworks. This role focuses on threat detection, incident response, and implementing best practices to protect enterprise infrastructure. Source: Adani Group | Job ID: 59221