Incident Manager - Detection & Response

Details

Anthropic’s Detection & Response (D&R) team protects systems, users, and data from security threats. This senior-level Technical Program Manager specialization focuses on owning and evolving incident management across detection, triage, containment, remediation, and post-incident learning. The role emphasizes not only leading incident response but driving cross-functional follow-through so the organization meaningfully improves after each incident.

Responsibilities

• Own the end-to-end D&R incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for security incidents, coordinating executive, engineering, security, legal, and other stakeholders.
• Establish and run incident commander rotations within D&R to ensure ownership and coordination for incidents of varying severity.
• Define how action items are captured, assigned, tracked, and completed across teams to drive post-incident accountability for both tactical fixes and strategic improvements.
• Gather, analyze, and report on incident trends and patterns to surface systemic risks and recurring root causes.
• Translate trend analysis into cross-functional initiatives and partner with engineering, infrastructure, security, and product teams to prioritize and implement fixes that address root causes.
• Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon.
• Develop and maintain incident response documentation, playbooks, runbooks, and training materials; keep them current as the threat landscape and systems evolve.
• Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events.
• Define, develop, and track incident management KPIs and report regularly to D&R and Security leadership.
• Support cross-functional training and initiatives to raise security awareness across the company (e.g., tabletop exercises, training, talks).

Requirements

• 7+ years of experience in technical program management, incident management, or security operations, with significant experience in detection & response or security incident response.
• Experience leading or building incident response programs at a technology company, ideally in high-growth or security-intensive environments.
• Demonstrated track record of turning incident data into organizational improvements and driving cross-functional work to implement systemic fixes.
• Comfortable participating in on-call responsibilities and leading incident response during high-severity security events, including off-hours.
• Experience building and scaling operational processes from the ground up in ambiguous environments.
• Strong ability to drive accountability and follow-through across multiple teams without direct authority.
• Strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
• Excellent communication skills under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
• Highly organized and able to bring structure to ambiguous, fast-moving situations.

Compensation

• Annual Salary: $320,000 - $405,000 USD

Logistics

• Locations: San Francisco, CA and New York City, NY.
• Minimum education: Bachelor’s degree or equivalent combination of education, training, and/or experience in a relevant field.
• Location-based hybrid policy: staff are expected to be in one of Anthropic's offices at least 25% of the time; some roles may require more time in office.
• Visa sponsorship: Anthropic states they do sponsor visas and will make reasonable efforts to secure a visa for candidates they hire, with immigration legal support.

Company & Culture

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. The organization emphasizes collaboration, large-scale research efforts, and strong communication. Benefits mentioned include competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office space for collaboration.