Principal Incident Commander

We're looking for an Information Security Incident Commander to join our team, passionately focused on coordinating and leading response efforts to the incidents that most impact Atlassian and our customers.

• You'll be part of the Incident Response Team and report to the Head of Incident Response.
• We have teams in Amsterdam, Australia, India, and the USA. This position is responsible for coordinating with all stakeholders, both technical and non-technical during an incident response effort, including but not limited to, various legal teams, product engineering, Crisis Communications, Support, Customers, and Risk & Compliance.  
• If you are passionate about improving security, trust & safety, have strong verbal and written communication skills, and can organize effectively under pressure, this may be a role for you!

What you'll do

• Identify which plans, playbooks, and processes apply to a particular Security Incident
• Engage all required stakeholders for a particular response effort and ensure they are kept aware of all details and developments 
• Regularly update leadership on a regular cadence and when significant changes to previously known statuses arise
• Lead incident bridge calls
• Translate technical communications into non-technical communications
• Assist in the development of an overall response strategy
• Participate in preparedness activities such as tabletop exercises and red team events
• Assist with internal and external incident related communication, both written and verbal
• Document incident response efforts
• Drive incident response efforts to meet SLOs and SLAs
• Participate in after action reviews
• Take on impactful and highly visible project work to strategically improve our incident response and incident management capabilities 
• Other, as required

Your background

• Previous incident management experience 
• 7+ years experience in information security
• Strong written and verbal communication skills
• You pay a great attention to detail
• You have an investigative mindset
• You’ve demonstrated the ability to stay organized under pressure
• You have the confidence to manage up to more senior leaders during incident response activities
• You are able to effectively delegate tasks across diverse workstreams 
• Experience leading functional groups/engagements, if not direct people management 
• Awareness of what Enterprise customers expect from a vendor when that vendor is communicating and incident or vulnerability 
• Familiarity with the related regulatory landscape (i.e. GDPR, FedRAMP, DORA, etc.) 
• Considers the customer impact when making technical decisions
• Understanding of cybersecurity principles, threat landscape, and best practices

If you've got these skills, even better

• Experience as a cybersecurity forensic investigator
• Incident detection experience 
• Cyber Threat Intelligence 
• DevSecOps experience and proficiency 
• Metrics development and program evaluation