Staff Engineer, Incident Response

Responsibilities

• Run incidents end to end, from first alert to post-mortem, across cloud and SaaS environments
• Write detections that catch real threats with a strong bias toward signal over noise
• Shape the next generation of the SOC, including AI agent integration into workflows
• Partner across the firm including Legal, Compliance, Finance, and IT during incidents
• Drive post-mortems that lead to operational change
• Work against sophisticated adversaries including nation-state groups and organized criminal operations

Requirements

• 5+ years of incident response experience with cloud IR depth in AWS and GCP
• Experience leading live incidents including triage, containment, eradication, and forensic investigation
• Experience running proactive, hypothesis-driven threat hunts
• Hands-on detection authoring in modern SIEM platforms (Sigma, KQL, or equivalent)
• Strong Python scripting skills for building automation
• Demonstrated capability with cloud telemetry, EDR, SOAR, and SIEM
• Experience defending against nation-state or organized criminal threat actors
• Working knowledge of AI/agent systems and their security implications
• Ability to translate technical incident realities for non-technical stakeholders

Preferred Qualifications

• GCIH or equivalent IR certification

About the Company

Andreessen Horowitz (aka a16z) is a venture capital firm that backs bold entrepreneurs building the future through technology. Founded in Silicon Valley in 2009, the firm manages over $100B across multiple funds, investing in sectors ranging from AI and fintech to bio + healthcare and crypto.