• Lead, mentor, and develop a team of incident responders, ensuring clear expectations, growth, and consistent execution. • Define and drive the security incident response roadmap and strategic priorities, focusing on maturity, scalability, and readiness. • Oversee execution across detection, triage, containment, remediation, and post-incident learning. • Support forensic investigations, log reviews, cloud investigations, and root-cause analysis as an escalation point • Partner with Detection Engineering, Threat Intelligence, and other teams to improve cross-functional processes. • Maintain and evolve the development of incident response playbooks, team processes, training, and tabletop exercises. • Communicate effectively with stakeholders at all levels during incidents and throughout follow-up reporting. • Participate in the on-call rotation, serving as an incident manager or responder during major or complex incidents. • Track and report on incident trends, operational metrics, and program maturity.