# Manager, Incident Response

**Company:** [Fluidstack](https://hotfix.jobs/companies/fluidstack)
**Location:** San Francisco, CA, New York, NY
**Role:** Security Engineering
**Salary:** $300k – $400k/yr
**Experience:** 7+ years
**Skills:** Incident Response, Incident Command, On-Call Management, Threat Intelligence, Regulatory Reporting, Ot Security, Ics Security, FedRAMP, Physical Security, Detection Engineering
**Posted:** 2026-07-02

> Lead incident response as senior commander and escalation lead for AI compute infrastructure. Build and manage 24/7 IR team and on-call program from scratch, handling cross-domain (cyber/physical/OT) incidents with executive, legal, and regulatory communications.

## Job Description

## Role Scope
- Lead incidents as a senior incident commander in the on-call rotation, and serve as the escalation backstop when a case rises above the responders on call.
- Own the 24/7 coverage model, rotation discipline, and response SLAs for your US region, keeping the program humane and the bar high at the same time.
- Build and develop a team of senior incident responders, setting the on-call expectations and quality bar they operate to.
- Drive executive, legal, and customer communications during declared incidents, including regulated reporting and disclosure timelines.
- Own the joint operating relationship with Physical Security and Data Center Operations for incidents that cross cyber, physical, and OT surfaces.
- Run the post-incident review cadence and drive remediation to completion across detection, response, and infrastructure.
- Hold the bar on the agentic triage layer, defining what the agent escalates and feeding incident learnings back to detection engineering and threat intelligence.

## Requirements
- Led material incidents end to end as a senior incident commander at organizations with sophisticated, well-resourced threat actors.
- Managed and grown a team of senior responders while staying in the on-call rotation yourself.
- Designed or run a 24/7 on-call program: coverage models, rotation discipline, acknowledgement and response SLAs, and escalation chains.
- Move between technical containment and executive, legal, or customer-facing communications during a declared incident without losing the thread.
- Made disclosure-grade calls under regulatory and customer reporting clocks.
- Built operating relationships across security, infrastructure, and physical or facilities teams, and led incidents that crossed those boundaries.
- Well-founded opinions on what makes an on-call program humane and an incident response process effective, and ready to build one from a small senior core.

## Nice-to-Haves
- Incident response bridging cyber, physical, and OT or ICS surfaces.
- Experience at critical-infrastructure operators, data centers, or 24/7 high-availability environments.
- Standing up or scaling an IR team and on-call program from scratch.
- Operating under FedRAMP, SEC, or similar regulated incident-reporting regimes.
- Agent-augmented IR, including triage, investigation, or response automation.

## Similar roles

- [Regional Site Security Lead, Deployment & Ops](https://hotfix.jobs/jobs/230fbb8b-e9a3-4d1c-a92a-ddc985723452) - Fluidstack - San Francisco, CA - $300k – $400k/yr
- [Security Operations Lead](https://hotfix.jobs/jobs/000c2082-a6e2-42c0-9979-5972900d4621) - Replit - Foster City, CA - $295k – $385k/yr
- [Security Preparedness Lead, Coding Agents](https://hotfix.jobs/jobs/691cb3e6-25c4-406b-ae48-7a4dbdd63fe8) - OpenAI - San Francisco, CA - $293k – $405k/yr
- [Secure Manufacturing & Stealth Investigator](https://hotfix.jobs/jobs/05ab75fb-81b8-4563-91db-4250d329a302) - OpenAI - San Francisco, CA - $288k – $425k/yr
- [Platform Security Engineering, Auditor](https://hotfix.jobs/jobs/ee5121f3-cbff-45bf-9335-946d6eb1d61a) - Anthropic - San Francisco, CA - $320k – $405k/yr

**Apply:** https://hotfix.jobs/jobs/92d9fcb7-72f5-4451-9b5b-85f32f1d78e9
**Canonical:** https://hotfix.jobs/jobs/92d9fcb7-72f5-4451-9b5b-85f32f1d78e9