Senior Incident Response Engineer - IR Lead & Tabletop

1 Fair Isaac Corporation; United States; On-site; USD 137,000 - 215,000; Full time

Benefits offered by this job

Competitive compensation

Flexible/remote work options

Learning & development opportunities

Job summary

FICO in the United States is seeking a Senior Incident Response Engineer to lead defensive security operations, own detection, containment, and recovery from incidents, and design tabletop exercises that engage stakeholders from planning through execution.

You will build IR plans and runbooks, partner with threat intelligence, SOC, and engineering to strengthen detection and controls, and communicate clearly with leadership during incidents.

Qualifications

• In-depth experience designing and facilitating IR tabletop exercises or similar simulations across cross-functional teams.
• Strong interpersonal skills: calm under pressure, effective facilitator, trusted across teams.
• Experience in enterprise incident response across the full IR lifecycle.
• Familiarity with forensics tools and cloud security fundamentals.
• Certifications such as GCIH, GCFA, GCFE, AWS Solutions Architect, or CISSP are desired.

Responsibilities

• Design and facilitate incident response tabletop exercises across security, IT, engineering, legal, and business teams, testing preparedness and surfacing gaps.
• Own the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-incident review.
• Build and maintain IR plans, playbooks, and runbooks for consistent, repeatable response.
• Partner with threat intelligence, SOC, and engineering to turn IR and exercise findings into stronger detection and controls.
• Communicate clearly with stakeholders at all levels, during incidents and in reporting.
• Support digital forensics investigations, apply the PICERL and NIST frameworks, and lead IR activities in cloud environments using SIEM, CSPM, and other cloud security tooling.
• Bring an IR perspective to FICO’s cloud and AI security programs and use AI and automation in IR and tabletop exercise workflows.

Skills

IR tabletop design

Cross-functional leadership

Incident lifecycle

Threat awareness

Cloud security basics

Tools

Magnet Axiom

Velociraptor

Volatility

FTK

Autopsy

AWS basics

Job description

FICO in the United States is seeking a Senior Incident Response Engineer to lead defensive security operations, own detection, containment, and recovery from incidents, and design tabletop exercises that engage stakeholders from planning through execution.

You will build IR plans and runbooks, partner with threat intelligence, SOC, and engineering to strengthen detection and controls, and communicate clearly with leadership during incidents.