As a Senior Security Engineer on the Incident Response team, you will lead complex security investigations while also building the systems and automation that make response faster, more reliable, and more scalable. This role blends deep investigative expertise, hands-on engineering, and structured incident coordination. You will drive incidents end-to-end, build automation and workflows that reduce response friction, and contribute to a culture of learning and psychological safety during high-pressure situations. This is a high-impact role with meaningful ownership across both incident execution and operational engineering. This role reports to the Manager of Security Incident Response. This is a remote opportunity within Canada and the US. What we're looking for: - An experienced incident lead who can independently drive complex investigations and coordinate diverse stakeholders. - A builder who enjoys improving systems, automation, and workflows - not just responding to alerts. - Calm and decisive under pressure, with strong judgment in ambiguous or high-severity situations. - Structured and organized, with strong project management skills to own complex projects - A clear communicator who can translate technical findings into actionable guidance for both technical and non-technical audiences. - A collaborative teammate who values blameless learning and psychological safety - 5+ years of experience in security incident response roles, with 3+ years focused on security engineering and automation. - Proven experience leading complex security incidents in cloud-native or SaaS environments. - Experience building automation or internal tooling to improve security operations. - Proficiency in scripting or programming (e.g., Python, Go, Bash) and working with APIs or orchestration platforms. - Familiarity with applying AI/ML-assisted workflows to operational security use cases. - Strong understanding of modern attacker techniques and incident response methodologies. - Strong written and verbal communication skills, including executive-facing summaries. What you can expect: - Lead and execute security incidents end-to-end, from initial signal through containment, recovery, and post-incident review - Assess severity, declare incidents, and drive structured coordination and decision-making during active response - Perform hands-on investigations and threat hunting to determine root cause, attacker behavior, scope, and impact - Design and build automation to reduce triage, investigation, and response time - Develop scalable systems and workflows that improve incident response and incident management - Identify recurring pain points and detection/response gaps, and implement durable engineering solutions - Improve incident response playbooks, case management, and orchestration tooling - Apply AI-assisted tooling to enhance triage, enrichment, and investigative workflows while maintaining accuracy USA-based roles only: The annual base salary for this role is between $153,000 USD and $214,000 USD plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $144,000 CAD and $202,000 CAD plus immediate participation in 1Password's generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing Maternity and parental leave top-up programs Generous PTO policy 💖 Four company-wide wellness days Growth and future Company equity for all full-time employees Retirement matching program Free 1Password account Community Paid volunteer days Employee-led inclusion and belonging programs and ERGs Peer-to-peer recognition through Bonusly