Remote opportunity at
1PasswordStaff Security Engineer, Security Incident Response
1Password is seeking a Staff Security Engineer for Security Incident Response to act as a senior technical leader and builder within the team. The employer provides…
Career Tools
About This Role
1Password is seeking a Staff Security Engineer for Security Incident Response to act as a senior technical leader and builder within the team. The employer provides unified access management and an enterprise password manager trusted by over 180,000 businesses. This position involves shaping incident response capabilities, designing AI-assisted automation systems, directing complex investigations, and owning readiness programs like tabletop exercises and gamedays. The role suits an experienced engineer with a…
Job Description
1Password is seeking a Staff Security Engineer for Security Incident Response to act as a senior technical leader and builder within the team. The employer provides unified access management and an enterprise password manager trusted by over 180,000 businesses. This position involves shaping incident response capabilities, designing AI-assisted automation systems, directing complex investigations, and owning readiness programs like tabletop exercises and gamedays. The role suits an experienced engineer with a strong background in incident command, software engineering, and multi-quarter capability planning who wants to improve security maturity across the organization.
The role operates remotely within Canada and the US. Team members utilize AI tools thoughtfully across the development lifecycle while maintaining human accountability. Candidates can expect a fast-paced environment that requires handling demanding technical challenges, driving continuous improvement, and partnering across engineering and security departments to close security gaps.
Responsibilities
- Serve as incident manager and technical escalation point for complex, high-severity security events.
- Design and build AI-assisted and automated systems to accelerate triage, investigation, and containment.
- Establish safety controls, approval gates, auditability, and rollback mechanisms for automated actions.
- Manage team readiness programs including tabletop exercises and incident gamedays from design through debriefing.
- Advance threat hunting and insider risk capabilities by defining priorities and delivering roadmap initiatives.
- Plan, sequence, and deliver multi-quarter projects that mature incident response capabilities.
- Provide mentorship and technical leadership to other engineers to strengthen engineering rigor and investigative judgment.
- Partner with Security Operations, Product Security, and Engineering teams to resolve gaps discovered during investigations and simulations.
- Foster psychological safety and blameless learning during retrospectives and debriefs.
Requirements
- Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or technical lead.
- Experience designing and building AI-assisted or agentic automation for security operations.
- Strong software engineering skills with experience building production tooling, automation, or systems.
- Experience owning a security program or capability roadmap end to end from planning to delivery.
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches.
- Experience designing and running tabletop exercises, gamedays, or readiness programs.
- Strong written and verbal communication skills for presenting technical tradeoffs to senior leadership.
Qualifications
- Experience mentoring engineers to raise the technical and investigative capabilities of a team.
Core Skills
Benefits
- Competitive health benefits
- Maternity and parental leave top-up programs
- Retirement matching program
- Free 1Password account
- Generous paid time off policy
- RSU program for most employees
- Paid volunteer days
- Peer-to-peer recognition through Bonusly
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this role remote?
Yes, this is a remote opportunity available within Canada and the US.
What is the salary for this position?
For USA-based roles, the annual base salary is between $192,000 USD and $278,000 USD. For Canada-based roles, it is between $167,000 CAD and $242,000 CAD, plus equity and benefits.
What kind of experience is required?
The posting requires significant experience as an incident commander or technical lead for high-severity security incidents, background in building AI-assisted automation for security operations, strong software engineering skills, and experience managing end-to-end security program roadmaps.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
