SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Anthropic is seeking an experienced Incident Manager for its Detection & Response (D&R) team to own and evolve the company's incident management program. This senior-level technical program management role focuses on protecting systems, users, and data from security threats through mature incident response lifecycle management.
Key responsibilities include owning the end-to-end D&R incident management program—detection workflows, response processes, escalation paths, and communication standards. You'll serve as incident commander for security incidents, driving coordination across executive, engineering, security, legal, and other stakeholders. You'll establish and run incident commander rotations, ensuring clear ownership during incidents of varying severity.
A critical aspect of this role is post-incident accountability: defining how action items are captured, assigned, tracked, and completed across teams to ensure follow-through on both tactical fixes and strategic improvements. You'll gather, analyze, and report on incident trends and patterns to surface systemic risks and recurring root causes. You'll translate trend analysis into actionable cross-functional initiatives, partnering with engineering, infrastructure, security, and product teams to implement broad fixes and preventive improvements.
Additional responsibilities include leading incident review forums (post-mortems, retrospectives), developing and maintaining incident response documentation and playbooks, partnering with detection engineering to improve alert fidelity, defining incident management KPIs, and supporting cross-functional training initiatives to uplevel security awareness company-wide.
You should have 7+ years of experience in technical program management, incident management, or security operations, with significant time in detection & response or security incident response contexts. You've led or built incident response programs at technology companies, ideally in high-growth or security-intensive environments. You have a demonstrated track record of turning incident data into organizational improvements and are comfortable with on-call responsibilities and leading incident response during high-severity events, including off-hours. You excel at driving accountability across multiple teams without direct authority, have strong analytical and communication skills, and thrive in fast-paced environments with shifting priorities.
