Partner 20, Senior Incident Response Engineer

About the role

We're hiring a Senior Incident Response Engineer to anchor a16z's detection and response work. You'll own incident triage and response across AWS and GCP, write the detections that catch real threats in our SIEM, and run point when something serious happens. The threats here are not theoretical. We see capital call wire fraud attempts, vishing campaigns, social engineering against IT and partners, and occasionally more sophisticated actors (nation-state groups, organized criminal operations) who specifically target venture capital firms. Your work protects the firm, our LPs, and our portfolio companies. You'll work day to day with the Head of Cybersecurity, Security Engineering, IT, and Legal. This role requires an in-office presence 2 days a week in our San Francisco, CA office. To join our team, you should be excited to: Run incidents end to end, from first alert to post-mortem, across cloud and SaaS environments Write the detections that catch real threats, with a strong bias toward signal over noise and broad MITRE ATT&CK coverage Help shape the next generation of our SOC, including AI agent integration into triage and response workflows Partner across the firm during incidents: investing teams, Legal, Compliance, Finance, IT, and firm leadership all get pulled in, and this role keeps every audience aligned under pressure Drive post-mortems that lead to operational change, not process for its own sake Work against real adversaries, including nation-state groups, organized criminal operations, and threat actors who specifically target venture capital firms