Incident Response Lead

The role

The Incident Response Lead drives security incident response across the enterprise. This individual contributor will serve as the primary internal escalation point and hands-on responder for security incidents.

What you will do

• Lead hands-on incident response activities
• Serve as the central incident commander across Security, IT, GRC, and Legal
• Partner with the SOC to validate alerts and drive containment and eradication
• Conduct host, cloud, and log-based investigations
• Coordinate with external forensic firms when needed
• Maintain and improve incident response playbooks and communication workflows
• Lead post-incident reviews and root cause analysis
• Develop and execute tabletop exercises and incident simulations
• Partner with GRC and Legal to support breach impact assessments
• Drive continuous improvement of detection and response capabilities

Required qualifications

• 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations
• Proven experience leading incident investigations in complex, cloud-native environments
• Strong experience conducting host, cloud, and log-based investigations
• Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring
• Experience working with external SOC or MDR providers
• Strong understanding of attack frameworks (MITRE ATT&CK)
• Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks
• Excellent communication skills
• Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent)

Benefits

• base salary
• generous equity package

Before you apply

• Must be prepared to relocate to the Boston, MA office if necessary
• Participates in E-verify

About the company

WHOOP is on a mission to unlock and inspire performance for life.