# Staff Incident Responder

**Company:** [Fluidstack](https://hotfix.jobs/companies/fluidstack)
**Location:** San Francisco, CA, New York, NY
**Role:** Security Engineering
**Salary:** $250k – $350k/yr
**Skills:** Incident Response, Incident Commander, Runbook Development, Threat Analysis, Ot/Ics Security, Cyber-Physical Incident Response, Security Kpis, Tabletop Exercises, Regulatory Compliance, Agent-Augmented Ir
**Posted:** 2026-05-15

> Senior-most incident commander building and operating Fluidstack's Detection & Response Engineering program. Defines runbooks, leads material incidents across IT/OT/physical surfaces, and sets standards for agent-first IR at scale.

## Job Description

## What you’ll do
- Run material incidents as incident commander, coordinating across detection, response, physical security, data center operations, legal, communications, and customers.
- Build the IR program: runbook standards, severity definitions, materiality methodology, evidence contracts, and post-incident review cadence.
- Define the agent-human contract for response: escalation criteria, evidence packages required from agents, and human verdict feedback into agent quality.
- Design and operate the senior-IR on-call rotation (ack SLAs, escalation chain, fan-out logic) and remain an active senior IC inside it.
- Analyze incident trends and patterns to surface systemic risks and recurring root causes, and turn the learnings into runbook, detection, or program improvements.
- Drive cross-functional follow-through after every significant incident, tracking remediation and systemic fixes to completion across detection, response, infrastructure, and other teams.
- Define and track the IR program’s KPIs and report on them to security and engineering leadership.
- Set the tabletop and exercise cadence for IR readiness, executive crisis-comms, and audit-readiness drills.
- Carry the external face of IR for regulatory and customer disclosure obligations, and audit responses.

## About You
- You have run material incidents at companies with sophisticated threat models, as the most senior commander on the call.
- You have made disclosure-grade calls under regulatory and customer reporting clocks.
- You have written runbooks that other engineers followed under pressure, and rewritten them after they did not work.
- You have built operational processes from the ground up in environments where structure did not previously exist.
- You read the agent-first thesis as one of the most interesting design choices in incident response today.
- You have well-founded opinions on what makes a runbook actually used or an incident response process actually effective.
- You move fluently between technical containment and executive, legal, or customer-facing conversations during a declared incident.
- You see what is needed, scope it yourself, and run with it.

## Strong Candidates May Also Have
- Experience running incidents that bridge cyber, physical, and OT or ICS surfaces.
- Experience at critical-infrastructure operators, data centers, or industrial environments.
- Experience designing or operating agent-augmented incident response, including triage, investigation, or response automation.
- Experience tuning LLM-based IR systems against measured precision and recall.

## Similar roles

- [Staff Software Engineer, Fraud](https://hotfix.jobs/jobs/aa86d79c-af69-4a6a-bdd8-8bd480bb43a9) - Replit - Foster City, CA - $250k – $315k/yr
- [Staff Software Engineer, Risk](https://hotfix.jobs/jobs/5cc2b135-9342-4987-9b19-269e001150fe) - Replit - Foster City, CA - $250k – $315k/yr
- [Staff Software Engineer, Trust & Safety](https://hotfix.jobs/jobs/b088358f-42cf-4983-9717-f6c60abcc9e7) - Replit - Foster City, CA - $250k – $315k/yr
- [Staff Product Security Engineer](https://hotfix.jobs/jobs/79405bb0-9cc6-4690-8bb5-f9c43867f6f6) - Crusoe - San Francisco, CA - $250k – $285k/yr
- [Staff Software Engineer, Platform Security](https://hotfix.jobs/jobs/f9f68913-83ff-44d8-b357-749b29f4c55f) - Discord - Remote - $248k – $279k/yr

**Apply:** https://hotfix.jobs/jobs/f9dd71bf-90d8-4885-a743-deed513fd41c
**Canonical:** https://hotfix.jobs/jobs/f9dd71bf-90d8-4885-a743-deed513fd41c