Note: The job is a remote job and is open to candidates in USA. FICO is a leading global analytics software company that helps businesses make better decisions through data and technology. The Senior/Lead Cyber Security - Incident Response Engineer will lead defensive security operations, own the incident lifecycle, design tabletop exercises, maintain response plans, and strengthen cloud, AI, and security readiness across teams.
Responsibilities
- Design and facilitate incident response tabletop exercises across security, IT, engineering, legal, and business teams, testing preparedness and surfacing gaps
- Own the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-incident review
- Build and maintain IR plans, playbooks, and runbooks for consistent, repeatable response
- Partner with threat intelligence, SOC, and engineering to turn IR and exercise findings into stronger detection and controls
- Communicate clearly with stakeholders at all levels, during incidents and in reporting
- Support digital forensics investigations, apply the PICERL and NIST frameworks, and lead IR activities in cloud environments using SIEM, CSPM, and other cloud security tooling
- Bring an IR perspective to FICO’s cloud and AI security programs and use AI and automation in IR and tabletop exercise workflows
Skills
- In-depth experience designing and facilitating IR tabletop exercises or similar simulations, including engaging cross-functional participants and turning results into real improvements
- Strong interpersonal skills: calm under pressure, a skilled facilitator, a trusted relationship-builder across teams, and an effective coach and mentor
- Experience in enterprise incident response across the full IR lifecycle
- Good working knowledge of forensics tools (such as Magnet Axiom, Velociraptor, Volatility, FTK, Autopsy) and AWS cloud security fundamentals
- Good understanding of cloud security and AI security concepts
- Must have at least one of the following certifications, or similar: GCIH, GCFA, GCFE, AWS Certified Solutions Architect, or CISSP
Benefits
- An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.
- The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.
- Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
- An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.
- Remote work arrangement.
- Support needed to develop your skills and grow your career.
- Employment and advancement opportunities without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
Company Overview
Company H1B Sponsorship