Incident Manager - Detection & Response

Details

Anthropic is seeking an experienced Technical Program Manager to own and evolve incident management within the Detection & Response (D&R) team. This senior-level role focuses on detecting, responding to, and learning from security and operational incidents. The role will mature and scale the incident response lifecycle from detection and triage through containment, remediation, and post-incident review, while driving systemic improvements across engineering, security, infrastructure, and product teams.

Responsibilities

• Own the end-to-end D&R incident management program, including detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for security incidents and coordinate executive, engineering, security, legal, and other stakeholders.
• Establish and run incident commander rotations within D&R.
• Define how incident action items are captured, assigned, tracked, and completed across teams.
• Gather, analyze, and report on incident trends and patterns, including systemic risks, recurring root causes, and organizational vulnerabilities.
• Translate trend analysis into cross-functional initiatives that address root causes and implement preventive improvements.
• Lead post-mortems and retrospectives, ensuring that learnings are documented, shared, and acted upon.
• Develop and maintain incident response documentation, playbooks, runbooks, and training materials.
• Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events.
• Define, develop, and track incident management KPIs and report to D&R and Security leadership.
• Support cross-functional security awareness initiatives, including tabletop exercises, training, and talks.

Requirements

• 7+ years of experience in technical program management, incident management, or security operations, including significant experience in detection and response or security incident response.
• Experience leading or building incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
• Demonstrated ability to turn incident data into organizational improvements and drive cross-functional systemic fixes.
• Willingness and ability to participate in on-call responsibilities and lead high-severity security incidents, including outside regular working hours.
• Experience building and scaling operational processes from the ground up.
• Strong ability to drive accountability and follow-through across multiple teams without direct authority.
• Strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
• Excellent organization and communication skills, including communication under pressure with technical and non-technical stakeholders and executive leadership.
• Ability to work effectively in fast-paced environments with shifting priorities and incomplete information.
• Minimum education: Bachelor’s degree or an equivalent combination of education, training, and experience.
• Required field of study: A field relevant to the role, as demonstrated through coursework, training, or professional experience.

Compensation

• Annual salary: $290,000–$365,000 USD.

Work Policy and Sponsorship

• Staff are expected to work from one of Anthropic’s offices at least 25% of the time; some roles may require more office time.
• Anthropic sponsors visas, although sponsorship availability may vary by role and candidate. The company states that it will make every reasonable effort to obtain a visa for an offer recipient and provides immigration lawyer support.

About Anthropic

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems that are safe and beneficial for users and society. Anthropic is a public benefit corporation headquartered in San Francisco.