← Back to jobs

Staff Security Engineer, Security Incident Response

1password

Remoto Remote (United States | Canada)
Information Security Product Owner

Job Score

100 pts
Remote model (+90) Information Security (+10) Product Owner (+10)

1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.

About 1Password

At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.

If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.

As a Staff Security Engineer on Security Incident Response, you'll serve as a senior technical leader and builder for the team, helping shape both how we respond to incidents today and how our response capabilities evolve over time.This role is about advancing what the team is capable of, not just responding when something breaks. You'll design and build the AI-assisted systems that extend the team's reach, lead the response to the most complex incidents, and own programs that make the organization more prepared over time, from tabletop exercises and gamedays to the continued advancement of threat hunting and insider risk capabilities.

You bring engineering depth, sound incident judgment, and the ability to plan, and deliver complex work against a longer-term maturity roadmap not just execute against a queue.

This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents.

This role reports to the Manager, Security Incident Response.

How we’re using AI today

Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.

This is a remote opportunity within Canada and the US.

What we're looking for:

  • Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or equivalent technical lead.

  • Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment), with sound judgment about where automation should and shouldn't hold decision authority.

  • Strong software engineering skills, and experience building production tooling, automation, or systems rather than only operating existing security platforms.

  • Experience owning a security program or capability roadmap end to end, including planning, sequencing, and delivering multi-quarter work.

  • Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches.

  • Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements..

  • Strong written and verbal communication skills, including the ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders.

  • Experience mentoring engineers or otherwise raising the technical and investigative capabilities of a team.

How you'll work:

  • You look for opportunities to build systems that scale the team's capabilities rather than relying on repeated manual effort, and you're interested in thoughtfully applying AI and automation where they can improve security outcomes.

  • An experienced incident commander who brings structure to complex incidents, makes sound decisions with incomplete information, and helps teams move forward during high-pressure situations.

  • You're comfortable taking ownership of a capability from strategy through execution, including defining priorities, sequencing work, navigating dependencies, and delivering against a longer-term roadmap.

  • You can operate as a technical partner to leaders and cross-functional teams, independently representing technical priorities, risks, and tradeoffs.

  • You value continuous improvement and contribute to an environment where teams can examine incidents, decisions, and failures openly and turn what they learn into stronger systems and practices.

What you can expect:

  • Serve as incident manager and technical escalation point for complex, high-severity events, bringing structure, sound judgement, and clear decision-making under pressure.

  • Design and build AI-assisted and automated systems that improve how quickly and consistently the team can triage, investigate, and contain incidents.

  • Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions, ensuring high-impact decisions remain appropriately human-controlled.

  • Own the team's readiness programs, including tabletop exercises and incident gamedays, from scenario design and execution through debriefing and translating finishes into concrete (or measurable) improvements

  • Advance the team’s threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering roadmap work that improves investigative depth and coverage

  • Plan, sequence, and deliver multi-quarter initiatives that mature the team's capabilities, bringing project management discipline to work that doesn't fit neatly into a sprint.

  • Mentor and provide technical leadership to other engineers, strengthening engineering rigor and investigative judgement across the team.

  • Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations, hunting, and simulations.

  • Foster psychological safety and blameless learning across incident retrospectives, gamedays, and tabletop debriefs.

  • Extend strong incident response practices beyond the immediate team by building reusable systems, tooling, and operating patterns that strengthen response capabilities across areas such as PSIRT, Privacy, and Engineering.

USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

Canada-based roles only: The annual base salary for this role is between $167,000 CAD and $242,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.



At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.

This posting is for an existing vacancy.


Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.

You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.

How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.

This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.

Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.

What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:

Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy

Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account

Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.

You belong here.

1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.

Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.

Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.

Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.

1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form. For additional information see our Candidate Privacy Notice.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

About Product Owner

The Product Owner (PO) is the professional responsible for maximizing the value of the product delivered by the development team. They act as the voice of the customer and stakeholders, managing and prioritizing the product backlog, defining clear user stories, and ensuring the team works on the most valuable items for the business.

Key skills include backlog management, user story writing, prioritization (Mascow, RICE), agile methodologies (Scrum, Kanban), and stakeholder communication. Knowledge of tools like Jira, Trello, Azure DevOps, and Miro is essential.

Product Owners are highly sought-after professionals in the technology market, working collaboratively with Scrum Masters, Product Managers, and engineering teams to drive agility and continuous value delivery.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About UI Design

The User Interface (UI) Design area focuses on creating and designing all the visual elements that users interact with in a digital product. This includes screens, buttons, icons, typography, color palettes, and responsive layouts, ensuring an aesthetically pleasing, consistent, and easy-to-use interface. Skills in tools like Figma and knowledge of design systems are essential.

About Digital Marketing

Digital Marketing is a constantly expanding field, driven by e-commerce growth and the need for a strong digital presence. Marketing professionals master tools like Google Ads, Meta Ads, HubSpot, Google Analytics, and automation platforms.

Most sought-after specializations include Growth Marketing, Performance, SEO, Content Marketing, and Growth Hacking. The combination of creativity with data analysis is the most valued differentiator in the market.

The market offers opportunities in both agencies and technology companies, with competitive salaries and remote work possibilities.

About Data

The Data field has undergone a radical transformation with the rise of Generative AI. Data professionals are fundamental for evidence-based decision-making across all industries.

Key specializations include Data Engineering, Data Science, Business Intelligence, Machine Learning Engineering, and Analytics. Tools like SQL, Python, Spark, dbt, and cloud platforms (AWS, GCP, Azure) are essential.

The data market continues with high demand and salaries among the most competitive in the technology sector, with many remote work opportunities.

About Backend

The Backend area is responsible for all server logic, APIs, databases, and infrastructure that support web and mobile applications. Backend professionals ensure that systems are scalable, secure, and performant.

Key skills include languages like PHP, Java, Python, Ruby, Go, and Node.js, frameworks like Laravel, Spring Boot, Django, and Express, databases (MySQL, PostgreSQL, MongoDB, Redis), software architecture (clean architecture, DDD, microservices), and API security (OAuth, JWT).

Backend developers in technology companies are highly valued, especially those who master microservices architecture, cloud computing, and high-scale performance. The field offers opportunities from junior developer to software architect, with a focus on scalability, security, and efficiency.

About Web Designer

The Web Designer is the professional responsible for creating visual interfaces for websites, web applications, and landing pages, combining aesthetics, usability, and user experience. They transform business needs into functional and responsive layouts that communicate brand identity.

Key skills include UI design, responsive design, prototyping (Figma, Sketch, Adobe XD), wireframing, design systems, accessibility (WCAG), information architecture, and basic HTML/CSS knowledge. Knowledge of UX design, motion design, and front-end is a differentiator.

Web Designers in technology companies are highly valued, especially those who master design systems, design tokens, and can create interfaces that convert and engage. The field offers opportunities from junior web designer to product designer and design lead.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

The Audiovisual Revolution in the Digital Age

Discover the skills, cloud tools, and strategic mindsets that tech giants, global agencies, and startups demand from video professionals in 2026.

The audiovisual market has undergone a radical transformation. The era when the best opportunities were restricted solely to traditional film studios or television networks is over. Today, the massive volume of premium hiring—including 100% remote positions and six-figure compensation packages—comes from tech companies, digital product startups, Growth Marketing agencies, and streaming-focused production houses.

To stand out in this new landscape, it is no longer enough to just "know how to cut video." The modern professional must be a visual problem solver, possessing a deep understanding of audience retention, cross-platform formats, and cloud-based workflows.

1. Master Cloud Workflows and Collaboration

If you are looking for a global remote position, the first barrier you will face is infrastructure. International production companies and tech startups no longer ship external hard drives via mail. They require candidates who know how to operate seamlessly within real-time review and collaboration ecosystems.

  • Frame.io: It has become the industry standard (now natively integrated into Adobe). Knowing how to manage real-time feedback and version control using Frame.io is an absolute prerequisite for senior editors.
  • Proxy Workflows: Mastering the creation and editing of proxies in Premiere Pro or DaVinci Resolve is non-negotiable for anyone editing 4K/6K footage remotely on standard internet connections.
"The ability to collaborate asynchronously and manage media in the cloud is no longer a perk, but the backbone of modern post-production teams." — Frame.io Insider

2. Embrace Integrated Artificial Intelligence

The fear of being replaced by AI is common, but corporate reality tells a different story: companies are actively hiring professionals who leverage AI to multiply their productivity. Tech recruiters are looking for talent who can automate tedious tasks and focus on high-level art direction.

  • Generative AI: Tools like Runway Gen-2, Midjourney, and Adobe Firefly are being used to create storyboards, expand backgrounds (Generative Fill), and generate auxiliary assets for Motion Graphics on the fly.
  • Audio and Roto AI: Using tools like Adobe Podcast AI for one-click audio cleanup and DaVinci Resolve's Magic Mask for automatic rotoscoping reduces hours of manual labor to mere minutes. Highlight these efficiency gains on your resume.

3. Your Portfolio is Your Ultimate Currency

In the audiovisual universe, your text-based resume matters far less than your Showreel. However, the most common mistake is creating a Reel filled only with pretty pictures and upbeat music, devoid of context.

According to hiring guidelines from top agencies listed on Motionographer, a top-tier portfolio must feature:

  1. The "Breakdown": Don't just show the final render. Show the layers, the color correction (before/after), or the raw shapes in After Effects. Prove that you are the architect behind the work.
  2. Focus on Results: If a video you edited for a TikTok Ads campaign increased conversion rates by 30%, state that clearly in the project description. Data-driven results secure B2B contracts.
  3. The Right Platforms: Forget Google Drive links. Host your work on Vimeo (for high-quality playback without ads) or Behance (for detailed project case studies). Even better: have your own dedicated website.

4. Soft Skills and B2B Dynamics

Video editors and motion designers often work in silos, but in modern tech companies, they are fully immersed in agile methodologies (Scrum/Kanban). You will need to interact daily with Copywriters, Product Managers, and Growth Analysts.

Knowing how to receive critical feedback without taking it personally, understanding the difference between a "technical revision" and a "strategic revision," and communicating rendering deadlines clearly are the soft skills that guarantee your retention in high-paying remote roles.

Don't Let Your Next Big Opportunity Slip Away

We respect your inbox. Zero spam, just verified premium jobs and high-value insights.