SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 192,000 - 278,000 / annual
1Password is seeking a Staff Security Engineer to lead the Security Incident Response team's technical strategy and execution. This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents.
You will serve as a senior technical leader and builder, advancing the team's capabilities beyond reactive incident response. Key responsibilities include:
- Serve as incident manager and technical escalation point for complex, high-severity security events, bringing structure and sound judgment under pressure
- Design and build AI-assisted and automated systems that improve triage, investigation, and containment speed and consistency
- Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions, ensuring high-impact decisions remain human-controlled
- Own the team's readiness programs, including tabletop exercises and incident gamedays, from scenario design through translating findings into concrete improvements
- Advance threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering roadmap work
- Plan, sequence, and deliver multi-quarter initiatives that mature team capabilities with project management discipline
- Mentor and provide technical leadership to other engineers, strengthening engineering rigor and investigative judgment
- Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations
- Foster psychological safety and blameless learning across incident retrospectives and debriefs
- Extend incident response practices across the organization by building reusable systems, tooling, and operating patterns
1Password is a market-leading enterprise password manager and Unified Access Management platform, trusted by over 180,000 businesses including Fortune 100 companies. The company has surpassed $400M ARR and was named to the Forbes Cloud 100 for four consecutive years.
The role is fully remote within the United States and Canada. Travel for in-person engagement (annual offsites, team meetings, customer/industry events) is expected as part of remote-first operations.
REQUIREMENTS:
- Significant experience leading complex, high-severity security incidents across multiple environments, including serving as incident commander or equivalent technical lead
- Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment) with sound judgment about automation authority boundaries
- Strong software engineering skills and experience building production tooling, automation, or systems (not just operating existing security platforms)
- Experience owning a security program or capability roadmap end-to-end, including planning, sequencing, and delivering multi-quarter work
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches
- Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements
- Strong written and verbal communication skills, including ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders
- Experience mentoring engineers or raising the technical and investigative capabilities of a team
