Incident Response Manager Jobs

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve technical incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world. What you’ll do You'll play a critical role in safeguarding our financial ecosystem by investigating high-risk accounts and identifying complex patterns of fraud during incidents. You will lead incident response for product abuse and fraud events, conducting deep-dive analyses to identify root causes. By collaborating cross-functionally, you will drive improvements that enhance our fraud detection and prevention strategies at scale. Your expertise will be essential in automating response processes through agentic approaches, allowing us to safeguard merchants and neutralize threats with speed and precision. Responsibilities Investigate, mitigate, and remediate urgent fraud incidents (e.g., ATO, card testing), utilizing FT3-mapped detection and signals enrichment to reduce uncertainty and accelerate

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Abuse Operations is the front-line incident response and remediation function handling active product abuse and fraud impacting Stripe and its merchants. This multi-disciplinary group, spanning Incident Managers, Investigators, Forward Deployed Security Engineers, and Data Scientists, neutralizes active attacks, gathers requirements for operational tooling, and leads incidents. The team works directly with impacted merchants to resolve incidents and policy abuse rapidly. Operating primarily across Eastern, Pacific and Western European time zones, these team members regularly coordinate with global stakeholders across the world. What you’ll do In this role, you will play a critical part in safeguarding our financial ecosystem through two main pillars: actively responding to live fraud and abuse incidents as a hands-on security engineer, and serving as a key bridge between incidents and merchants to help them remediate threats, improve security posture, and protect their accounts. Leveraging your technical depth in fraud, abuse, and security engineering, you will investigate high-risk accounts, perform post-incident analyses, gather operational requirements, and drive agentic response capabilities ensuring we neutralize threats with speed and precision while elevating Stripe's product integrity function. Responsibilities Respond to live fraud and abuse incidents as a Forward Deployed Security Engineer, investigating high-risk activity, neu

About the Team The Global Safety and Security team advances DoorDash through the protection of people, property, operations, brand, and reputation. We deliver value through agility, technology, and a people-first mindset—creating environments where employees and guests feel safe, welcome, and confident. As DoorDash continues to evolve its workplace experience globally, our Corporate Safety and Security team is reimagining how physical security integrates seamlessly into every employee and guest interaction. The Associate, GOC Analyst will play a key role in designing and delivering this next-generation security experience. About the Role We are hiring a GOC Analyst to support DoorDash’s 24/7 Global Operations Center. Reporting to the GOC Manager, this role is responsible for real-time monitoring, incident triage, and operational response to protect DoorDash’s people, assets, and operations. As a frontline operator, you will serve as the first line of defense during emerging incidents—monitoring systems, assessing risk, executing SOPs, and escalating issues quickly and accurately. In addition to core operational response, you will apply foundational analytical skills to validate information, distinguish signal from noise, provide clear operational context that supports timely escalation and informed decision-making. You’ll operate in a high-tempo, follow-the-sun environment where clarity, discipline, and sound judgment are critical to maintaining operational resilience. You are excited about this opportunity because you will… Operate the GOC in Real Time: Monitor dashboards, alerts, inbound reports, and open-source signals to identify security, safety, and operational incidents as they emerge. Execute Incident Response with Precision: Triage incidents, follow established SOPs, and support incident command activities through accurate documentation, coordination, and information validation. Maintain Situational Awareness: Track ongoing incidents, relevant global events

Sr. Automation Engineer - IT Asset Management Req ID: GAQ427R222 About the Role As a Senior Automation Engineer on the IT Asset Management team at Databricks, you will be the technical engine behind transforming how we manage ~$XXM/yr in asset spend across SaaS licenses and hardware. Your primary mission is to eliminate manual toil and build scalable, AI-powered automation that makes asset operations fast, accurate, and effortless as Databricks scales past 14,000 employees. Your initial focus will be on IT asset management workflows: automating new hire laptop provisioning, SaaS license lifecycle management, asset data reconciliation, and hardware recovery. Over time, you will expand your automation footprint across IT Support and Operations, including IT support workflows, AV/VC and event support, and incident response management. This role requires a strong automation-first mindset, the ability to learn new domains quickly, and comfort building with AI/LLM tools. You will report to the Senior Manager of IT Asset Management. The Impact You Will Have New hire laptop provisioning: Build end-to-end automation for assigning, configuring, and shipping laptops to new hires, targeting a 75% reduction in manual ticket toil. SaaS license lifecycle: Automate license consumption monitoring, inactivity-based seat clawbacks, renewal alerting, and cost optimization workflows to help drive $1.5M+ in annual savings and cost avoidance. Asset data quality: Automate CMDB/inventory reconciliation, deduplication, and multi-device detection to bring asset records to audit-ready accuracy. Offboarding asset recovery: Automate tracking and recovery of hardware from exiting employees, reducing loss and improving chain-of-custody compliance. Broader IT Ops automation (over time): Extend automation into IT support, AV/VC and event support, and incident response management as the ITAM automation foundation matures. What We Are Looking For Core Qualifications 5+ years of experience in IT system

Defense Unicorns seeks a Senior Software Engineer to work on our core products. You’ll collaborate closely with product managers, designers, and end users to ensure we’re building the right solutions—and building them well. The team enables Platform Engineers to securely build, deploy, and operate mission-critical applications in regulated and disconnected environments by providing the core platform and tooling that power UDS. As a Senior Software Engineer, you’ll operate at the intersection of product development and technical execution. You’ll lead the design, implementation, and deployment of features and systems that have direct impact on mission outcomes. Responsibilities: Work with engineers internal to the company, and within the open source community on feature and bug fix requests Proactively identify and resolve ambiguity in product requirements Comfortable in an asynchronous, all remote environment Actively participate in communities of practice via Slack and Github Issues Integrate software products with existing defense systems, ensuring seamless interoperability and adherence to security protocols Own architecture decisions and ensure technical quality across the engineering team Develop comprehensive documentation, including design specifications, user manuals, and maintenance guides Stay abreast of emerging technologies and industry trends to inform product enhancements and innovation. Provide technical mentorship and elevate engineering standards across the team Influence product direction through deep understanding of user needs and system constraints Participates in a shared 24x7 on-call rotation, owning incident response, troubleshooting, and coordination to ensure reliable production systems Travel Expectations/Requirements: 5-15% The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able

About THG Ingenuity THG Ingenuity is a fully integrated digital commerce ecosystem, designed to power brands without limits. Our global end-to-end tech platform is comprised of three products: THG Commerce, THG Studios, THG Fulfilment. Each represents a single, unified solution, overcoming challenges and taking brands direct-to-consumer. Our client portfolio includes globally recognised brands such as Coca-Cola, Nestle, Elemis, Homebase, and Proctor & Gamble. Database Engineer (DBA) Company: THG Ingenuity Location: Manchester (Head Office) Reports to: Database Platform Manager Role Overview We are looking for a Database Engineer to help run and improve our database platform. Our estate runs on Google Cloud Platform following a recent migration to self-managed services. There is plenty still to do in the next phase of modernising the estate, and you will be hands-on in that work as well as in the day-to-day running of the platform. You will work alongside a small team of database engineers and closely with engineering and infrastructure teams, keeping our database environments secure, reliable and performant. There is real scope to grow here, and you will be supported to deepen your technical expertise and take on more as you do. The role participates in a rotating on-call rota and occasionally requires out-of-hours work to support deployments, maintenance or incident response. Key Responsibilities Database administration Install, configure, maintain and upgrade PostgreSQL and SQL Server environments across development, test and production Ensure database servers are securely configured, patched and compliant with operational standards Own backup, restore and maintenance strategies, and test recovery procedures regularly Maintain database security, access control and auditing practices Cloud and infrastructure &n

About the Team At DoorDash, including international brands Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Global Cyber Defense is a highly talented and globally distributed team that covers response, intelligence, insider risk, threat hunting, automation, and detection engineering. We exist to keep our brands safe for the Dashers, merchants, and consumers who depend on us. Our mission is to detect, investigate, and respond to cyber threats with speed and precision, while continuously hardening our defenses through automation, AI, and cross-regional collaboration. About the Role The senior detection engineer is part of the larger detection engineering team that creates, tunes, maintains, and improves the detection lifecycle. This hands-on role is at the forefront of agentic detection engineering of a rapidly maturing security function. You’ll work closely with our data pipelines team, incident response, insider risk, and threat intelligence teams to make the most effective detection content to detect threats as quickly as possible. Detection at DoorDash spans more than the corporate estate. You’ll build coverage across cloud infrastructure, corporate endpoints and identity, and the marketplace itself - where consumer, merchant, and Dasher platforms create abuse and insider-risk patterns you won’t find in a typical enterprise SOC. We’re actively consolidating detection onto a modern data platform, so you’ll have real influence over what the pipeline looks like. This role reports to the Senior Manager, Cyber Defense located in the United States and participation in an on-call rotation is required for this role. You’re excited about this opportunity because you will… Conduct hands-on detection engineering for custom alerting, to include implementing risk-based analytics to reduce alert volumes and promote high-fidelity alert

About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. The Ubiquiti Prague office is looking for a Network / DevOps Engineer to own how our datacenter infrastructure is deployed, provisioned, and operated. This is a hands-on role for someone who treats infrastructure as software: everything that can be automated, should be. You'll be responsible for production deployments in the DC, device provisioning, and the CI/CD and tooling that makes it all repeatable. Candidates should be prepared to work from our Prague office at least two times per week. Requirements: 5+ years in infrastructure, DevOps, SRE, or a software engineering role with heavy infra ownership Strong hands-on experience with Ansible and Terraform (or equivalent) for provisioning and config management Solid CI/CD experience — building and maintaining pipelines, not just consuming them A software engineer's mindset: you write clean, testable automation and think in terms of idempotency, state, and repeatability rather than one-off scripts Comfortable operating production environments: deployments, rollbacks, monitoring, incident response Good scripting/programming ability (Python, Go, Bash, or similar) Comfortable working close to the hardware and network layer, and debugging across the stack Strong communication and documentation abilities Fluency with modern AI-assisted development tools (Claude Code

Spaulding Ridge is an advisory and IT implementation firm. We help global organizations get financial clarity into the complex, daily sales, and operational decisions that impact profitable revenue generations, efficient operational performance, and reliable financial management. At Spaulding Ridge, we believe all business is personal. Core to our values is our relationships with our clients, our business partners, our team, and the global community. Our employees dedicate their time to helping our clients transform their business, from strategy through implementation and business transformation. What You Will Do and Learn: The Cybersecurity Operations Analyst will support the Cybersecurity Manager in maintaining and improving Spaulding Ridge's security posture. This entry-level role is ideal for someone looking to develop a career in cybersecurity while gaining hands-on experience across security operations, vulnerability management, identity and access management, cloud security, and compliance. The analyst will assist in monitoring security events, responding to security alerts, supporting security projects, and maintaining security documentation while learning from senior members of the Technology & Security team. Security Operations Monitor and analyze security alerts from SIEM, EDR, Firewall, WAF, IDS/IPS, email security, and cloud security platforms. Conduct and Support threat hunting and detection of tuning activities. Monitors open-source and proprietary threat intelligence feeds daily to research threat actor tactics, techniques, and procedures (TTPs). Support the investigation and triage of security alerts and incidents under the guidance of the Cybersecurity Manager. Assist with incident response activities, including documentation, evidence collection, and follow-up actions. Help maintain security playbooks and operational procedures. Vulnerability Management Assist with vulnerability scanning across endpoints, servers, and cloud environments.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Flexdrive is a subsidiary of Lyft that works together with Lyft teams to realize our shared mission. At Flexdrive, we're at the forefront of revolutionizing transportation by building the operational backbone for autonomous vehicle (AV) fleets. As a leader in fleet management, we're leveraging our expertise to enter the AV space, forming strategic partnerships with cutting-edge technology providers. We're looking for a hands-on leader to help us pioneer this new chapter, starting with our first AV depot in Nashville, Tennessee. Reporting to the Operations Manager, AV Deployment , Flexdrive is seeking an experienced and safety-focused Operations Lead to manage morning to afternoon shift operations and ensure comprehensive safety compliance for our 24/7 AV depot in Nashville. This critical role bridges operational excellence with rigorous safety standards, serving as the primary on-shift leader responsible for team management, incident response, and maintaining compliance with all partner and regulatory requirements. You will be the guardian of operational safety and efficiency, ensuring every shift meets or exceeds our stringent safety and performance standards. This role requires a unique combination of operational leadership, safety expertise, and the ability to manage complex compliance requirements while maintaining high team performance. If you excel at leading teams in safety-critical environments and can balance operational demands with unwavering safety standards, we encourage you to apply. Work Schedule & Shift Availability Day Window Shift Pattern This role supports 24/7 AV depot operations and requires availability to work day shifts, with hours scheduled between 6:30 AM - 9:30 PM. Specific shift times and schedules will be determined based on operational needs and business requirements

About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. Responsibilities: Daily tasks managing and administering AWS services including, ECS, IAM, RDS, Lambda and API Gateway; Identify and implement tools to improve existing environments (CI/CD, monitoring, logging); Write Terraform code to automate the deployment of infrastructure and services as needed; Interact with fellow engineers assisting to deploy and support applications through the development lifecycle; Train and mentor fellow engineers in best practices utilizing DevOps practices; Participate in production application support and on-call support; Manage a queue of backlog activities with varying degrees of priorities. Requirements: 4+ years of experience architecting and deploying AWS infrastructure; Ability to write modular Terraform code for creation of AWS infrastructure; Understanding of core DevOps and CI principles; Experience with CI software (e.g Jenkins, GitHub Actions) for deployment automation; Ability to code in Python or NodeJS or Bash for task automation; Ability to triage on incident response teams; Knowledge of security best practices around networking and applications; Understanding about Docker container management and deployments; Customer Service skills with a focus on supporting engineering teams; Fluent in English and Latvian. Nice to have: Knowledge and experience utilizing AWS CI services (CodeDeplo

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Sr. Site Reliability Engineer (Production Engineer) to join our team. This is a hybrid role (onsite three days a week in Santa Clara, CA, reporting to the Senior Manager, Site Reliability Engineering in the Zero Trust Exchange department. As a key member of the Zero Trust Exchange team, you will own the systems-level reliability and performance of Zscaler’s high-throughput bare-metal and cloud infrastructure processing tens of billions of daily transactions across a global, multi-region fleet. This is a software-first SRE role: you will write production-grade code and automation, drive the shift from reactive incident response, and bring engineering discipline to the systems-level work - OS, network and application debugging - that keeps the fleet operating safely at scale. What You’ll Do (Role Expectations) Maintain high availability across large-scale bare-metal Linux/BSD fleets, Kubernetes clust

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Stripe’s Financial Crimes Compliance Risk Oversight (FinCRO) team is looking for a U.S. Regulatory Compliance Lead for our Banking-as-a-Service (BaaS) business. You’ll own second-line oversight of Stripe’s U.S. BaaS products and bank-fintech partnerships. The work is practical and cross-functional: turn federal and state requirements and supervisory expectations into clear policies, controls, monitoring, evidence, and ownership. What you’ll do This role is focused on U.S. BaaS regulation. You’ll work across sponsor-bank and fintech responsibility mapping; BSA/AML and sanctions; consumer protection and fair lending; deposits and FDIC insurance representations; privacy, cybersecurity, incident response, and third-party risk; complaints and disputes; payment network and ACH rules; state money transmission and lending requirements; and regulatory exams, remediation, and change management. Responsibilities Own the second-line compliance framework for Stripe’s U.S. BaaS products (i.e., Capital, Issuing, and Treasury) and bank-fintech partnerships. Make sure responsibilities are clear across Stripe, sponsor banks, program managers, processors, and other partners. Turn U.S. federal and state laws, guidance, enforcement actions, and supervisory expectations into practical policies, product requirements, controls, procedures, evidence standards, and monitoring. Set and oversee controls for BSA/AML, customer identification and verification, custome

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase is building the future of institutional trading as part of the Everything Exchange, powering the systems that let the world's largest financial institutions trade across markets with speed, depth, and trust. As a Senior Data Engineer, Market Data on the Institutional Markets team, you'll build and operate the systems that capture, normalize, and distribute real-time market data across Coinbase at low latency - the feed handlers, venue connectors, and distribution layer that form the backbone of a unified trading platform. What you'll do: Build and maintain market data components including feed handlers, normalization pipelines, distribution systems, and venue connectivity. Design and implement low-latency, high-throughput services for real-time market data consumed by trading systems across the platform. Drive reliability and performance improvements through observability, on-call participation, and incident response. Write high-quality, well-tested code and contribute to engineering standards on a lean team. Partner with engineers, product managers, and cross-functional stakeholders to deliver market data capabilities that support Coinbase's institutional trading roadmap. Required Skills and Experience: 3+ years of backend engineering experience building and maintaining production low-latency systems. Hands-on experience with at least one area of market dat

About the Job: LaunchDarkly is seeking a Senior Backend Engineer to join our Experimentation team. The Experimentation team is building one of the company’s most strategic product areas: a platform that helps leading engineering organizations move beyond intuition and make product decisions with real statistical confidence. Sitting at the intersection of large-scale systems, data science, and user experience, the team is creating a best-in-class experimentation product that lets customers set up, manage, and analyze experiments with ease while still earning the trust of even the most rigorous data teams. From warehouse-native analysis to experimentation workflows built on top of LaunchDarkly’s massive feature management scale, this team is tackling ambitious technical problems with visible customer impact and a clear opportunity to define the future of modern software experimentation. As a Senior Backend Engineer, you will design and operate the services that power this product, contribute to technical direction, and help deliver new functionality to customers. You will work closely with product managers, designers, data scientists, and engineers across LaunchDarkly to solve complex, data-intensive problems with meaningful customer impact. Responsibilities: Design, build, and operate scalable backend services and APIs that power LaunchDarkly’s Experimentation product. Own backend components across their lifecycle, including technical discovery, design, implementation, testing, deployment, monitoring, incident response, and continuous improvement. Build and evolve systems supporting experiment setup, event data ingestion, metric computation, results processing, and results presentation. Contribute to architectural decisions and technical proposals, making thoughtful trade-offs around scalability, reliability, performance, cost, and maintainability. Partner with product managers, designers, data scientists, and adjacent engineering teams to translate customer needs an