Staff Security Engineer, Security Incident Response - 1Password

About 1Password

1Password is building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. Over 180,000 businesses trust 1Password to help their teams securely adopt SaaS and AI tools.

About the Role

As a Staff Security Engineer on Security Incident Response, you'll serve as a senior technical leader and builder for the team, helping shape both how we respond to incidents today and how our response capabilities evolve over time. This role is about advancing what the team is capable of, not just responding when something breaks. You'll design and build AI-assisted systems that extend the team's reach, lead the response to complex incidents, and own readiness programs across the organization.

This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents. This role reports to the Manager, Security Incident Response.

What We're Looking For

• Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or equivalent technical lead.
• Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment), with sound judgment about where automation should and shouldn't hold decision authority.
• Strong software engineering skills and experience building production tooling, automation, or systems rather than only operating existing security platforms.
• Experience owning a security program or capability roadmap end to end, including planning, sequencing, and delivering multi-quarter work.
• Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches.
• Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements.
• Strong written and verbal communication skills, including the ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders.
• Experience mentoring engineers or otherwise raising the technical and investigative capabilities of a team.

How You'll Work

• Look for opportunities to build systems that scale the team's capabilities rather than relying on repeated manual effort, thoughtfully applying AI and automation.
• Serve as an experienced incident commander who brings structure to complex incidents and makes sound decisions under pressure.
• Take ownership of capabilities from strategy through execution, including defining priorities and delivering against a longer-term roadmap.
• Operate as a technical partner to leaders and cross-functional teams, independently representing technical priorities, risks, and tradeoffs.
• Foster continuous improvement and an environment where teams examine incidents and failures openly to build stronger systems.

What You Can Expect

• Serve as incident manager and technical escalation point for complex, high-severity events.
• Design and build AI-assisted and automated systems that improve triage, investigation, and containment.
• Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions.
• Own readiness programs, including tabletop exercises and incident gamedays from scenario design through debriefing.
• Advance threat hunting and insider risk capabilities by defining priorities and delivering roadmap work.
• Plan, sequence, and deliver multi-quarter initiatives with project management discipline.
• Mentor and provide technical leadership to other engineers.
• Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations and simulations.
• Foster psychological safety and blameless learning across incident retrospectives.
• Build reusable systems, tooling, and operating patterns across areas such as PSIRT, Privacy, and Engineering.

Compensation & Benefits

Base Salary:

• United States: $192,000 USD – $278,000 USD
• Canada: $167,000 CAD – $242,000 CAD

Benefits Include:

• Health and dental coverage
• Equity grant / RSU program
• Retirement matching program (401k / RRSP)
• Generous PTO and paid volunteer days
• Maternity and parental leave top-up programs
• Free 1Password account and peer recognition rewards