Role overview

WHOOP is seeking an Incident Response Lead to manage security incident response across the organization. You will serve as the primary internal escalation point and hands-on responder for security incidents, working closely with WHOOP’s 24×7 SOC provider and coordinating with cross-functional teams across Security, IT, GRC, and Legal to investigate, contain, and remediate threats.

Key responsibilities

Lead hands-on incident response activities and serve as the primary internal escalation point when security events occur.
Act as incident commander across Security, IT, GRC, and Legal departments during active security incidents.
Partner with the SOC provider to validate alerts, guide investigations, and direct containment and eradication efforts.
Conduct investigations using host, cloud, and log-based methods, and coordinate with external forensic firms when necessary.
Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows.
Lead post-incident reviews and root cause analysis to ensure remediation actions are clearly defined and tracked.
Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness.
Support GRC and Legal teams with breach impact assessments and regulatory notification processes.
Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems.
Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives.
Participate in an on-call escalation rotation to provide after-hours incident leadership.

Requirements

At least 7 years of experience in incident response, digital forensics, threat detection, or SOC operations.
Proven experience leading incident investigations in complex, cloud-native environments.
Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring.
Experience working with external SOC or MDR providers.
Strong understanding of attack frameworks such as MITRE ATT&CK and their application to detection and response.
Experience supporting breach response obligations under regulatory frameworks such as GDPR, HIPAA, or PCI.
Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure.
Bachelor’s degree or relevant certifications including GCIH, GCFA, CISSP, or equivalent.

What makes this role worth considering

This is a highly technical individual contributor position based in Boston, MA with significant ownership and visibility across the security organization. You will receive competitive compensation including a base salary range of $130,000–$170,000, meaningful equity that aligns you with the company’s long-term success, and benefits as part of WHOOP’s total compensation approach.