Senior AI-Driven Incident Response Engineer

Intuit Inc.; Charlotte (NC); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Cash bonus

Equity rewards

Benefits

Job summary

Intuit is seeking an experienced Senior IR Security Engineer to join our Escalations team within the SOC. You will respond to modern cyber-attacks, guide incident management, and leverage AI SOC tools to accelerate triage and analysis.

You will develop IR playbooks, mentor junior responders, and collaborate with Compliance, Legal, and Risk teams to align security with business needs. A strong foundation in cloud security and forensics is required.

Qualifications

• Bachelor's degree or higher in technology, computer science, cybersecurity, or related field.
• Security certifications like AWS Security Specialty, GIAC, ISC2 advantageous.
• 3-5 years in cybersecurity with emphasis on forensics and IR.
• 1-3 years scripting/automation with AI tooling and AI SOC platforms.
• Experience with AI/LLM security risks and MITRE/NIST frameworks.
• Experience securing AWS/Azure/GCP and CSPM/EDR technologies.

Responsibilities

• Oversee and promptly respond to escalated security events and activate IR plan.
• Provide on-call support and report incident status to stakeholders.
• Lead investigations to determine root cause, scope, and impact.
• Leverage AI platforms to accelerate triage and documentation.
• Develop and improve IR playbooks ensuring compliance with regs.
• Present guidance on security best practices to partners.
• Mentor junior responders and coach incident handling.
• Collaborate with Compliance, Legal, and Risk teams.
• Assess vulnerabilities and propose remediation strategies.

Skills

Incident response

AI/LLM security

Cloud security

Forensics

Security lifecycle

Communication

Education

Bachelor's degree in technology, CS, cybersecurity

Tools

CrowdStrike Falcon

Wiz

Splunk

LogScale

Job description

Intuit is seeking an experienced Senior IR Security Engineer to join our Escalations team within the SOC. You will respond to modern cyber-attacks, guide incident management, and leverage AI SOC tools to accelerate triage and analysis.

You will develop IR playbooks, mentor junior responders, and collaborate with Compliance, Legal, and Risk teams to align security with business needs. A strong foundation in cloud security and forensics is required.