Senior Incident Response Lead - AI & Crisis Management

F5; Seattle (WA); On-site; USD 182,000 - 273,000; Full time

Job summary

F5 is seeking a Principal Incident Response Lead to own the incident response program within the Office of the CISO. You will coordinate cross-functional response efforts, maintain the incident command structure during active events, and ensure effective communication and resolution tracking across F5's infrastructure, products, and customer environments.

The role requires a track record of leading high-severity cyber and product security incidents, driving end-to-end crisis management, and

Qualifications

• 10+ years of cybersecurity experience, including incident response, security operations, or investigations.
• Proven ability to lead enterprise-scale incident response programs across SaaS, cloud, hybrid, multicloud, and customer-facing environments.
• Strong knowledge of modern attack techniques, incident management, and cross-functional crisis coordination.
• Understanding of application delivery and security architectures (load balancing, WAF, API security, DDoS, Kubernetes ingress).
• Experience with log sources and security telemetry (CrowdStrike, SIEM, EDR, network logs).
• Familiarity with standards such as NIST, ISO, SOC, PCI, GDPR; ability to operate across time zones.
• FedRAMP eligible

Responsibilities

• Own incident response program governance, playbooks, severity model, metrics, and executive reporting.
• Lead end-to-end response for cyber and product security incidents, including preparation, detection, containment, and recovery.
• Coordinate cross-company stakeholders and maintain executive visibility during resolution.
• Develop AI security incident capabilities and coordinate with AI engineering and product security teams.
• Represent incident response in executive reviews, audits, and customer discussions.
• Drive readiness activities, tabletop exercises, and post-incident improvements.
• Mentor responders and security engineers through technical leadership.

Skills

Cybersecurity experience

Incident response

Crisis coordination

Executive communications

Tools

CrowdStrike

SIEM

EDR

Job description

F5 is seeking a Principal Incident Response Lead to own the incident response program within the Office of the CISO. You will coordinate cross-functional response efforts, maintain the incident command structure during active events, and ensure effective communication and resolution tracking across F5's infrastructure, products, and customer environments.

The role requires a track record of leading high-severity cyber and product security incidents, driving end-to-end crisis management, and