Lead, mentor, and develop a team of incident responders Define and drive the security incident response roadmap and strategic priorities Oversee execution across detection, triage, containment, remediation, and post-incident learning Support forensic investigations, log reviews, cloud investigations, and root-cause analysis Partner with Detection Engineering, Threat Intelligence, and other teams Maintain and evolve the development of incident response playbooks, team processes, training, and tabletop exercises Communicate effectively with stakeholders at all levels during incidents and throughout follow-up reporting Participate in the on-call rotation, serving as an incident manager or responder during major or complex incidents Track and report on incident trends, operational metrics, and program maturity