Incident Response Lead

Leads security incident response across WHOOP as a hands-on individual contributor, acting as the main internal escalation point and incident commander across Security, IT, GRC and Legal, and working with the company's round-the-clock outsourced SOC. The responder validates alerts, runs host, cloud and log investigations, brings in outside forensic firms when needed, maintains playbooks, leads post-incident reviews, runs tabletop exercises, supports breach assessments and regulatory notifications, improves detection across SIEM, EDR, cloud and identity tooling, and reports incident metrics. On-call duty applies. WHOOP wants seven or more years in incident response, forensics, threat detection or SOC work, experience leading cloud-native investigations and working with MDR providers, and breach-response knowledge under GDPR, HIPAA or PCI. On-site in Boston.