Senior Incident Response Engineer — Remote Leader

FICO; Northern (KY); Hybrid; USD 137,000 - 215,000; Full time

Job summary

FICO in the United States is seeking a Senior Incident Response Engineer to lead our defensive security operations, owning the full IR lifecycle from detection to recovery and coordinating tabletop exercises across security, IT, engineering, legal and business teams.

You will work with threat intelligence, SOC, cloud security tooling and AI-driven workflows; candidates should have IR tabletop design experience, strong communication, and relevant certifications such as GCIH, GCFA, GCFE, AWS

Qualifications

• In-depth experience designing and facilitating IR tabletop exercises or similar simulations with cross-functional participants.
• Experience across the full incident response lifecycle from detection to post-incident review.
• Familiarity with forensics tools and cloud security concepts, including AWS fundamentals.

Responsibilities

• Design and facilitate incident response tabletop exercises across security, IT, engineering, legal, and business teams.
• Own the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-incident review.
• Build IR plans, playbooks, and runbooks for repeatable response; coordinate with threat intel and SOC.
• Communicate findings clearly to stakeholders and lead IR activities in cloud environments with SIEM/CSPM.

Skills

IR tabletop design

Cross-functional facilitation

IR lifecycle

Forensics tools

Cloud security

AWS fundamentals

Security certifications

Job description

FICO in the United States is seeking a Senior Incident Response Engineer to lead our defensive security operations, owning the full IR lifecycle from detection to recovery and coordinating tabletop exercises across security, IT, engineering, legal and business teams.

You will work with threat intelligence, SOC, cloud security tooling and AI-driven workflows; candidates should have IR tabletop design experience, strong communication, and relevant certifications such as GCIH, GCFA, GCFE, AWS