Sr. Security Engineer - Incident Response

ffive; Warszawa; On-site; PLN 240,000 - 320,000; Full time

Job summary

F5 is seeking a Senior Incident Response Lead based in Poland to act as a dedicated incident command within the Office of the CISO.

You will coordinate cross-functional response efforts across global teams, maintain the incident command structure during active events, and ensure consistent documentation and resolution tracking across F5's infrastructure, applications, products, and customer-facing environments.

Qualifications

• 7+ years of cybersecurity experience with incident response.
• Proven ability to lead complex incident response activities in SaaS/cloud/hybrid environments.
• Strong knowledge of modern attack techniques, incident management, and executive communications.
• Experience coordinating crisis response across multiple teams and regions.

Responsibilities

• Lead end-to-end incident response for cyber and product security incidents.
• Coordinate cross-functional response efforts across global teams and maintain incident command structure.
• Manage communications, documentation, and resolution tracking during active events.
• Develop AI incident response capabilities and integration with AI governance.
• Define playbooks, governance, metrics, and executive reporting for incident response.

Skills

Incident response

Security operations

Threat hunting

Cross-functional coordination

Executive communication

Tools

Kubernetes

Job description

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Senior Incident Response - Poland

F5 Office of the CISO | Application Delivery, Security, and AI Resilience

Position Summary

We are seeking a senior Incident Response Lead based in Poland to serve as a dedicated incident command and response member within F5's Office of the CISO. This role coordinates cross-functional response efforts across global teams, maintains incident command structure during active events, and ensures consistent communication, documentation, and resolution tracking across F5's infrastructure, applications, products, and customer-facing environments.

Key Responsibilities

Incident Response Program Leadership

Support F5's incident response strategy, roadmap, governance, standards, playbooks, severity model, metrics, and executive reporting.

Lead end-to-end response for cyber and product security incidents, including preparation, detection, containment, recovery, customer impact assessment, and post-incident learning.

Manage cyber crises end to end by defining workstreams, driving decisions, coordinating cross-company and regional stakeholders, and maintaining executive visibility through resolution.

AI Security and Incident Response

Build incident response capabilities for AI-enabled applications, models, agents, inference traffic, AI gateways, APIs, and runtime data paths secured or delivered through F5 technologies.

Partner with AI engineering, product security, security research, and governance teams on AI incident classification, response procedures, customer notification inputs, and recovery frameworks.

Advance AI-assisted security operations, observability, automated triage, and responsible response automation across F5 environments.

Strategic Security Leadership

Contribute to F5 security strategy across incident response, product security, threat intelligence, application security, detection engineering, and resilience.

Coordinate security, engineering, SRE, product, legal, compliance, privacy, communications, customer support, and business teams during readiness and response activities.

Represent incident response in executive reviews, audits, customer escalations, partner discussions, and board-level conversations.

Operational Excellence

Define KPIs and KRIs for response effectiveness, vulnerability readiness, customer-impact reduction, and product security resilience.

Lead tabletop exercises, cyber simulations, product security drills, and customer-impact response assessments.

Improve MTTD, MTTC, MTTR, observability, fleet visibility, automation, and response orchestration across F5 environments.

Technical Leadership

Provide expert guidance on cloud, identity, endpoint, application, API, Kubernetes, WAAP, DDoS, bot defense, AI security, threat hunting, vulnerability response, and digital investigations.

Mentor and help guide learning for responders and security engineers through technical leadership, influence, and practical operating guidance.

Qualifications

7+ years of cybersecurity experience, including strong expertise in incident response, security operations, threat hunting, vulnerability response, product security, or investigations.

Proven ability to lead complex incident response activities in SaaS, cloud, hybrid, multicloud, and customer-facing technology environments.

Strong knowledge of modern attack techniques, incident management, executive communications, cross-functional crisis coordination, workstream management, and stakeholder orchestration.

Understanding of application de