SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 210,000 - 240,000 / annual
Typeface is an AI-powered enterprise marketing platform backed by Microsoft, GV, Salesforce, Lightspeed, Madrona, and Menlo. The company helps Fortune 100 brands move from brief to fully personalized campaigns in days rather than months.
You will lead the end-to-end incident response lifecycle for Typeface's platform, owning detection, triage, containment, eradication, recovery, and post-incident review. Your responsibilities include:
• Lead security incident response across cloud infrastructure, endpoints, identity systems, and SaaS applications
• Investigate alerts and suspicious activity to identify root causes and emerging risks
• Build and maintain incident response playbooks, runbooks, and escalation procedures
• Perform log analysis, digital forensics, and threat hunting
• Automate detection and response workflows to reduce time-to-detect and time-to-resolve
• Collaborate with Engineering, Product, IT, Legal, and Customer teams on incident coordination and stakeholder communication
• Conduct tabletop exercises and drive continuous improvement of security posture
• Mentor teammates and foster a blameless, security-first culture
This role is hybrid, based in Palo Alto with 3 days per week in-office collaboration.
REQUIREMENTS:
• 10+ years of incident response, security operations, or digital forensics experience with a track record of leading investigations end-to-end
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent practical experience)
• Hands-on cloud security experience in AWS, Azure, or GCP
• Proficiency with SIEM, EDR, and SOAR tools
• Strong understanding of attacker techniques and frameworks (MITRE ATT&CK, NIST incident handling)
• Scripting skills in Python, PowerShell, or Bash for automation
• Excellent communication skills; ability to work independently and lead collaboratively
• Experience supporting B2B or enterprise SaaS products
• Bonus: Background securing AI or generative AI systems
• Bonus: Industry certifications (GCIH, GCFA, GCIA, CISSP)
