Senior DFIR Engineer - Incident Response & Forensics

Intuit Inc.; Frisco (TX); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Bonus potential

Equity rewards

Benefits package

Job summary

Intuit Inc. is seeking a Senior Security Engineer to join the DFIR team within the SOC. You will respond to cyber-attacks, lead forensic investigations, and extend playbooks to cover AI/LLM risks and agentic platforms. You will collaborate with Compliance, Legal, and Risk to align IR with regulatory needs.

You will mentor responders, tune detections, and help build threat hunting capabilities across AI, cloud, and endpoint telemetry, ensuring swift action and regulatory compliance.

Qualifications

• A Bachelor's degree or higher in Technology, CS, Cybersecurity, or related field, or equivalent hands-on experience is preferred.
• Industry certifications such as CISSP, GCIH, GCFA, GFCE, or AWS Security Specialty are advantageous.
• 3-5 years in a dedicated cybersecurity role with emphasis on digital forensics and IR.
• 1-3 years writing scripts (Bash, PowerShell, Python) to automate security work; familiar with AI coding tools.
• Experience with AI/LLM security risks and mitigations and frameworks like MITRE ATT&CK, NIST AI RMF.

Responsibilities

• Oversee and promptly respond to escalated security events and incidents.
• Provide on-call support for critical severity issues and report status to stakeholders.
• Lead forensic analysis to determine root cause, scope, and impact.
• Investigate incidents involving AI/LLM tools and extend IR playbooks for AI risks.
• Develop and improve incident response plans, procedures, and playbooks.
• Leverage AI SOC platforms to accelerate triage and investigations.
• Present guidance on security best practices and incident response to partners.
• Mentor incident responders in forensics and cloud security forensics.
• Collaborate with Compliance, Legal and Risk to align IR with regulatory needs.
• Assess vulnerabilities and stay updated on threats and countermeasures.

Skills

Incident response

Digital forensics

Threat hunting

Scripting (Python)

AI security awareness

Cloud security fundamentals

Communication skills

Education

Bachelor's degree in Technology/CS or equivalent

Certifications in security (CISSP, GCIH, GCFA, GFCE, AWS Security Specialty)

Tools

CrowdStrike Falcon

Wiz

Splunk

LogScale

Job description

Intuit Inc. is seeking a Senior Security Engineer to join the DFIR team within the SOC. You will respond to cyber-attacks, lead forensic investigations, and extend playbooks to cover AI/LLM risks and agentic platforms. You will collaborate with Compliance, Legal, and Risk to align IR with regulatory needs.

You will mentor responders, tune detections, and help build threat hunting capabilities across AI, cloud, and endpoint telemetry, ensuring swift action and regulatory compliance.