Security Incident Manager, Asana

• 10+ years of experience in incident management and security
• Hands on experience building training and processes to develop engineers into incident responders
• Experience working in environments composed of mainly SaaS and Cloud resources
• Hands-on technical expertise in at least two of the following areas:
• Abuse
• Cloud Security
• Detection & Response
• Digital Forensics
• Fraud
• Network Security
• Track record of successfully leading projects and mentoring engineers on incident response
• Experience in making technical trade-offs and articulating them to stakeholders
• Strong communication skills with ability to explain complex technical concepts clearly
• Experience communicating at different levels and to both people internal and external to the company
• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making

Desirable

• We are looking for a Security Incident Manager with experience managing incidents and maturing incident response across the company
• You will be working with a world-class team of engineers building out incident response capabilities and making it a core part of our company culture
• We are looking for an extremely customer obsessed individual that wants to deliver the best possible experience for our customers
• This role will report into the Security Engineering group that is responsible for the security of Asana the company and the security of the product to make sure we maintain customer trust and are able to grow sustainably
• You will collaborate with teams across the company including Infrastructure, Customer Success, Legal, IT, Marketing, company leadership, and other key stakeholders to drive better incident response outcomes for our company and our product
• As the Security Incident Manager in our Security Engineering Group, you'll serve as both a hands-on incident commander and a technical leader, guiding a team of engineers to make sure we are effectively and promptly responding to incidents to maintain our confidentiality, integrity, and availability
• While this role focuses on incident leadership rather than people management, you'll be instrumental in decision-making, project execution, and mentoring team members
• Lead initiatives and OKRs related to incident response improvements for Infrastructure, Security, and Privacy
• Drive incident management and incident response best practices across the company
• Mentor team members through pairing, defining processes, and training exercises
• You will actively participate in and lead the on-call rotation, setting examples for security incident management
• You will lead retrospectives to help raise the engineering excellence and continuous improvement culture at the company
• Lead tabletop exercise to ensure different stakeholders are thinking about and preparing for incidents across the company