About this role
About the Role Navan is seeking a Technical Lead for Incident Response to own and drive the containment and remediation of security threats across our multi-cloud infrastructure, products, and operations. You will balance hands-on investigations with leadership to coordinate response efforts and protect the global travel and expense platform using a modern security stack. What You'll Do
- Act as the primary Incident Lead during high-severity events, owning the end-to-end response lifecycle including triage, containment, evidence capture, and post-incident root-cause analysis.
- Design and implement automation and SOAR workflows (using Tines) to automate triage, enrichment, and containment actions, accelerating response times.
- Collaborate cross-functionally with engineering, platform, and security teams to coordinate containment and remediation activities across multi-cloud environments.
- Analyze incidents to identify trends, drive root-cause analysis, and implement long-term mitigations. What We're Looking For
- Proven experience leading incident response in a security operations context; ability to own high-severity events.
- Strong technical depth in incident response, containment, evidence handling, and root-cause analysis.
- Experience designing and deploying SOAR workflows; hands-on with Tines or similar automation platforms.
- Familiarity with multi-cloud architectures and protecting global platforms (travel/expense) or equivalent scale.
- Excellent communication and coordination skills to lead cross-functional response efforts.