Security Incident Response Lead

<h2>About Nscale</h2> <p>Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.</p> <p>We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.</p> <h2>About the Role</h2> <p>We’re hiring a <strong><strong class="textBold">Security Incident Response Lead</strong></strong> to own and evolve Nscale’s incident response capability in a high-scale, <strong><strong class="textBold">AI-native environment</strong></strong>.</p> <p>This is a <strong><strong class="textBold">hands-on leadership role</strong></strong> focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with <strong><strong class="textBold">Detection &amp; Response</strong></strong> as well as cross-functional stakeholders including <strong><strong class="textBold">Infrastructure, IT, Legal, and Compliance</strong></strong>.</p> <p>You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth.</p> <p>This role will be part of the global CISO organization.</p> <h2>What you'll be doing</h2> <p><strong><strong class="textBold">Incident Leadership &amp; Coordination</strong></strong></p> <ul> <li value="1"><strong><strong class="textBold">Lead</strong></strong> end-to-end security incident response across the organization</li> <li value="2"><strong><strong class="textBold">Act</strong></strong> as the incident commander for high-severity events</li> <li value="3"><strong><strong class="textBold">Coordinate</strong></strong> cross-functional response efforts with Infrastructure, IT, Legal, and Compliance</li> <li value="4"><strong><strong class="textBold">Participate</strong></strong> in and help design on-call and escalation rotations</li> </ul> <p><strong><strong class="textBold">Investigations &amp; Forensics</strong></strong></p> <ul> <li value="1"><strong><strong class="textBold">Conduct</strong></strong> and oversee investigations across endpoints, cloud, and infrastructure systems</li> <li value="2"><strong><strong class="textBold">Apply</strong></strong> digital forensics techniques across logs, endpoints, and cloud environments</li> <li value="3"><strong><strong class="textBold">Drive</strong></strong> containment, eradication, and recovery efforts for active security incidents</li> <li value="4"><strong><strong class="textBold">Contribute</strong></strong> to threat hunting and proactive investigations</li> </ul> <p><strong><strong class="textBold">Process, Playbooks &amp; Operational Rigor</strong></strong></p> <ul> <li value="1"><strong><strong class="textBold">Develop</strong></strong> and maintain incident response playbooks and runbooks</li> <li value="2"><strong><strong class="textBold">Establish</strong></strong> escalation frameworks to support effective incident handling</li> <li value="3"><strong><strong class="textBold">Lead</strong></strong> post-incident reviews and root cause analysis efforts</li> <li value="4"><strong><strong class="textBold">Drive</strong></strong> long-term remediation actions following incidents</li> </ul> <p><strong><strong class="textBold">Tooling &amp; Response Improvement</strong></strong></p> <ul> <li value="1"><strong><strong class="textBold">Partner</strong></strong> with Detection &amp; Response teams to improve alerting, triage, and response workflows</li> <li value="2"><strong><strong class="textBold">Build</strong></strong> and scale incident response tooling and automation</li> <li value="3"><strong><strong class="textBold">Enhance</strong></strong> case management systems that support investigation and response operations</li> </ul> <h2>KPIs</h2> <ul> <li value="1"><strong><strong class="textBold">End-to-end security incident response effectiveness</strong></strong></li> <li value="2"><strong><strong class="textBold">High-severity incident coordination and command</strong></strong></li> <li value="3"><strong><strong class="textBold">Post-incident review and remediation completion</strong></strong></li> <li value="4"><strong><strong class="textBold">Incident response tooling, automation, and workflow maturity</strong></strong></li> </ul> <h2>About You</h2> <ul> <li value="1"><strong><strong class="textBold">8–12+ years</strong></strong> of experience in incident response, security operations, or digital forensics</li> <li value="2">Proven experience leading complex, high-severity incident investigations in cloud or distributed environments</li> <li value="3">Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs</li> <li value="4">Hands-on experience with <strong><strong class="textBold">SIEM</strong></strong>, <strong><strong class="textBold">EDR/XDR</strong></strong>, and detection tooling</li> <li value="5">Familiarity with cloud infrastructure and modern production environments</li> <li value="6">Deep understanding of attack techniques, threat actors, and incident lifecycles</li> <li value="7">Ability to operate as a technical leader during incidents and make decisions under pressure</li> <li value="8">Strong communication skills with the ability to brief leadership and coordinate across teams</li> <li value="9">Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus</li> <li value="10">Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial</li> </ul> <h2>What we can offer you</h2> <p>At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.</p> <p>Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. 🚀</p> <p>Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨</p> <p>Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.</p> <p>Human-First Flexibility: We treat you as humans first. 🫶🏽 Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.</p> <h2>Equal Opportunities Statement</h2> <p>We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.</p> <p>If there’s anything we can do to accommodate your specific situation, please let us know.</p> <p>The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.</p> <p>For information on how Nscale handles candidate personal data, please see our Employee &amp; Candidate Privacy Notice: Here.</p> <h2>Salary Range</h2> <p>The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.</p> <p>&nbsp;</p><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p>The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.</p></div><div class="title">Salary Range</div><div class="pay-range"><span>$150,000</span><span class="divider">&mdash;</span><span>$225,000 USD</span></div></div></div><div class="content-conclusion"><p><em>For information on how Nscale handles candidate personal data, please see our Employee &amp; Candidate Privacy Notice:&nbsp;<a href="https://drive.google.com/file/d/1QK5Yg04WHD9K9IAtJgQWubJZC9oLvatK/view?usp=sharing" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://drive.google.com/file/d/1QK5Yg04WHD9K9IAtJgQWubJZC9oLvatK/view?usp%3Dsharing&amp;source=gmail&amp;ust=1765375172804000&amp;usg=AOvVaw2Ncte4rmlGl8OKuFuDgDtx">Here.</a></em></p></div>