Senior Security Engineer, Incident Response

What we're looking for

• An experienced incident lead who can independently drive complex investigations and coordinate diverse stakeholders.
• A builder who enjoys improving systems, automation, and workflows – not just responding to alerts.
• Calm and decisive under pressure, with strong judgment in ambiguous or high-severity situations.
• Structured and organized, with strong project management skills to own complex projects
• A clear communicator who can translate technical findings into actionable guidance for both technical and non-technical audiences.
• A collaborative teammate who values blameless learning and psychological safety
• 5+ years of experience in security incident response roles, with 3+ years focused on security engineering and automation.
• Proven experience leading complex security incidents in cloud-native or SaaS environments.
• Experience building automation or internal tooling to improve security operations.
• Proficiency in scripting or programming (e.g., Python, Go, Bash) and working with APIs or orchestration platforms.
• Familiarity with applying AI/ML-assisted workflows to operational security use cases.
• Strong understanding of modern attacker techniques and incident response methodologies.
• Strong written and verbal communication skills, including executive-facing summaries.

What you can expect

• Lead and execute security incidents end-to-end, from initial signal through containment, recovery, and post-incident review
• Assess severity, declare incidents, and drive structured coordination and decision-making during active response
• Perform hands-on investigations and threat hunting to determine root cause, attacker behavior, scope, and impact
• Design and build automation to reduce triage, investigation, and response time
• Develop scalable systems and workflows that improve incident response and incident management
• Identify recurring pain points and detection/response gaps, and implement durable engineering solutions
• Improve incident response playbooks, case management, and orchestration tooling
• Apply AI-assisted tooling to enhance triage, enrichment, and investigative workflows while maintaining accuracy

USA-based roles only: The annual base salary for this role is between $153,000 USD and $214,000 USD plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

Canada-based roles only: The annual base salary for this role is between $144,000 CAD and $202,000 CAD plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.

🏆 Peer-to-peer recognition through Bonus

ly

You belong here.

1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.

Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.

Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.

Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.

1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form. For additional information see our Candidate Privacy Notice.