The Opportunity

As a Senior Incident Response Engineer at FICO, you will lead our defensive security operations with a strong focus on people, preparedness, and cross-team readiness. You will own how FICO detects,contains, andrecovers fromsecurity incidents, and build the organizational readiness that makes that possible.Youwillbe responsiblefordesigning and running tabletop exercisesthat bring stakeholders from across the business together and keep them engaged from planning through execution. If you love building trust across teams and shaping how FICO prepares for security incidents, this role is for you.

WhatYoullContribute

• Design andfacilitateincident response tabletop exercisesacross security, IT, engineering, legal, and business teams, testingpreparednessand surfacing gaps.

• Own the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-incident review.

• Build andmaintainIR plans, playbooks, and runbooksfor consistent, repeatable response.

• Partner with threat intelligence, SOC, and engineering to turn IR and exercise findings into stronger detection and controls.

• Communicate clearly with stakeholders at all levels, during incidents and in reporting.

• Supportdigital forensics investigations, apply the PICERL and NIST frameworks, and lead IR activities in cloud environments using SIEM, CSPM, and other cloud security tooling.

• Bring an IR perspective to FICOs cloud and AI security programsand use AI and automation in IR and tabletop exercise workflows.

WhatWereSeeking

• In-depthexperience designing andfacilitatingIR tabletop exercises or similar simulations, including engaging cross-functionalparticipantsand turning results into real improvements.

• Strong interpersonal skills: calm under pressure, a skilled facilitator, a trusted relationship-builder across teams, and an effective coach and mentor.

• Experience in enterprise incident responseacross the full IR lifecycle.Good working knowledge of forensics tools (such as Magnet Axiom, Velociraptor, Volatility, FTK, Autopsy) and AWS cloud security fundamentals.

• Good understanding ofcloud security and AI security concepts.

• Must have atleast one of the following certifications, or similar: GCIH, GCFA, GCFE, AWS Certified Solutions Architect, or CISSP

Our Offer to You

• An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.

• The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.

• Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.

• An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.

• The targeted base pay range for this role is: $136,500 to $214,500 with this range reflecting differences in candidate knowledge, skills and experience.
  

#LI-RR1

#LI-remote