Principal Security Engineer, Incident Response

F5 Inc

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
SeattleSan Jose
Salary
$182,200–$273,200 / yr
Employment
Full-time
Posted
15 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $189k
This role $228k
$130k $289k
below market most similar roles pay here above market

This role pays more than 79% of similar roles. Most pay $158,625–$220,000 — the blue band above. At the midpoint, this role pays about $228k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About F5 Inc

F5, Inc. is an American technology company specializing in application security, multi-cloud management, online fraud prevention, application delivery networking, application availability and performance, and network security, access, and authorization.

F5 Inc currently has 44 open roles on FindRole.

Listed pay typically runs $179,500–$269,300 across 31 roles with salary data.

Most-posted roles

View all roles at F5 Inc

At a glance

TL;DR · Principal Security Engineer, Incident Response

JOB TITLE: Principal Security Engineer - Incident Response The Principal Security Engineer - Incident Response serves as the Incident Commander within the Office of the CISO. This role leads enterprise-scale response efforts and cyber crisis management across corporate infrastructure, hybrid multicloud environments, and core product lines including BIG-IP, NGINX, and Distributed Cloud. You will orchestrate response workstreams, define global incident response roadmaps, and architect frameworks for AI-enabled applications and LLMs. Daily tasks involve leading 24/7 on-call rotations, conducting high-fidelity tabletop simulations, and translating forensic investigations into executive communications. You will utilize expertise in AWS, Azure, GCP, SIEMs, EDR platforms like CrowdStrike, and Kubernetes ingress security. The role ensures operational resilience and compliance with FedRAMP, NIST SP 800-61, ISO 27001, and PCI-DSS standards to mitigate modern adversary tradecraft.

What does a Security Engineer earn?

Median $193000 from 107 postings across 42 companies.

See salary data

What you'll do

  • Serve as the Incident Commander for enterprise-wide, high-severity cyber and product security incidents from detection through post-incident review.
  • Lead the rotating 24/7 on-call escalation rotation for major security incidents.
  • Own and evolve the global incident response roadmap, including playbooks, severity matrices, and governance standards.
  • Architect incident response frameworks for AI-enabled applications, LLMs, APIs, and model runtime data paths.
  • Author technical summaries, root-cause analyses, and board-level briefing materials for executive leadership and regulatory bodies.
  • Define and track key resilience metrics such as MTTD, MTTC, and MTTR while conducting high-fidelity tabletop simulations.
  • Mentor security engineers by establishing technical standards, investigation playbooks, and operational best practices.

What we're looking for

  • Must be a U.S. Citizen.
  • 10+ years of progressive cybersecurity experience in Incident Command, SOC leadership, Threat Hunting, Product Security, or Digital Forensics.
  • Experience must be in large-scale SaaS or cloud environments.
  • Willingness and availability to participate in a rotating 24/7 on-call escalation schedule.
  • Advanced understanding of application delivery, load balancing, WAF/WAAP, API gateways, DDoS mitigation, and Kubernetes ingress security.
  • Proven expertise investigating telemetry across AWS/Azure/GCP, SIEMs, EDR platforms, identity providers, and network/edge devices.
  • Working knowledge of MITRE ATT&CK, API attack vectors, and emerging AI/LLM threat landscapes.
  • Comprehensive familiarity with FedRAMP, NIST SP 800-61 / 800-53, ISO 27001, SOC 2, and PCI-DSS.

More like this

Similar roles

Principal Engineer, Cybersecurity Incident Response

Target

Brooklyn Park, MN 63 days ago
Python SOAR SIEM CI/CD DevSecOps Kubernetes REST APIs SQL NoSQL Git PowerShell Bash EDR Cloud Security Secrets Management Digital Forensics Agentic AI Observability Source Control
10+ yrs exp Hybrid

Senior Security Engineer, Detection & Response

Robinhood

Bellevue, WA +2 36 days ago $187,000–$220,000
Incident Response Detection Engineering Kubernetes SOAR AI Threat Hunting Threat Intelligence Vulnerability Management Blockchain DeFi
5+ yrs exp Hybrid

Security Engineer, Incident Response

F5 Inc

Seattle +1 22 days ago $132,000–$198,000
Incident Response Security Operations (SOC) Threat Hunting Digital Forensics AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation MITRE ATT&CK NIST SP 800-61 ISO 27001 FedRAMP PCI-DSS NGINX BIG-IP
5+ yrs exp Hybrid