Lead Incident Responder
Fluidstack · San Francisco, CA
About this role
**Lead Incident Responder — Fluidstack** **About Fluidstack** Fluidstack exists to make humanity more free. We’re building civilization-scale AI compute infrastructure—acquiring power, designing and operating data centers, and rethinking every layer of the stack to deliver 10 to 100s of gigawatts faster than anyone else. **How we operate** - **Be a barrel:** Full autonomy. Own things end to end. - **Insane urgency:** Move fast and push the frontier. - **Reason from first principles:** Challenge assumptions; best idea wins. - **Love of the game:** High intensity, long hours. - **Build something that matters:** Work that impacts the world. **Security Team (what you’ll help secure)** - Secure the frontier of AI: protect the most valuable and targeted artifacts—model weights and training infrastructure. - Build the security program from scratch: bare metal to boardroom, scaling across continents. - Your threat surface is measured in **gigawatts**—responsible for physical, logical, and operational security. **Role scope** - Lead incidents as a **senior incident commander** in the on-call rotation; act as escalation backstop when cases rise above on-call responders. - Own **24/7 coverage** for your **US region**: rotation discipline, response SLAs, and humane operations. - Build and develop a team of **senior incident responders** (expectations + quality bar). - Drive **executive, legal, and customer communications** during declared incidents, including regulated reporting and disclosure timelines. - Own joint incident operating relationships across **Cyber + Physical + OT/Data Center Operations**. - Run post-incident reviews and drive remediation to completion across detection, response, and infrastructure. - Set the bar for **agentic triage**: define what agents escalate and feed incident learnings back to detection engineering and threat intelligence. **What we’re looking for** - Led material incidents end to end as a senior incident commander against sophisticated, well-resourced threat actors. - Managed and grown a team of senior responders while staying active in the on-call rotation. - Designed or run a **24/7 on-call program** (coverage models, SLAs, escalation chains). - Can move between technical containment and executive/legal/customer communications without losing the thread. - Made disclosure-grade calls under regulatory and customer reporting clocks. - Built cross-functional operating relationships (security + infrastructure + physical/facilities) and led cross-boundary incidents. - Strong opinions on what makes on-call and incident response effective and humane—ready to build from a small senior core. **Bonus** - Bridging experience across **cyber, physical, and OT/ICS**. - Experience at critical infrastructure operators, data centers, or 24/7 high-availability environments. - Standing up/scaling an IR team and on-call program from scratch. - Operating under **FedRAMP, SEC, or similar** regulated incident-reporting regimes. - Agent-augmented IR (triage, investigation, or response automation). **Physical requirements** - Work in non-climate-controlled environments (construction areas, data halls, electrical/mechanical rooms, outdoor spaces). - Lift/carry/push/pull up to **40 lbs**. - Stand/walk/kneel/bend/crouch for long periods; wear required PPE (hard hats, safety glasses, steel-toed boots, gloves, hearing protection). - Climb stairs/ladders and move around equipment/cable trays/uneven surfaces. **Compensation & benefi
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.