Senior Incident Response Security Engineer, Escalations

Intuit

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
Charlotte, NC
Posted
52 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

How this pay compares to similar roles

Similar $185k
$132k $243k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $154,450–$216,000.

Based on 240 similar postings.

Employer

About Intuit

Intuit is a financial software company known for products like TurboTax, QuickBooks, Mint, and Credit Karma, helping consumers and small businesses manage their finances and taxes. Industry: Financial Software & Technology

Intuit currently has 256 open roles on FindRole.

Listed pay typically runs $202,500–$274,000 across 237 roles with salary data.

Most-posted roles

View all roles at Intuit

At a glance

TL;DR · Senior Incident Response Security Engineer, Escalations

The Senior Incident Response Security Engineer - Escalations joins the Escalations team within the Security Operations Center to defend against modern cyber-attacks. This role involves overseeing escalated security events, leading root cause investigations, and managing communications for critical severity issues. You will build and improve incident response plans, playbooks, and procedures while mentoring junior responders. Key responsibilities include leveraging frontier AI platforms and AI SOC tools to accelerate triage and investigating risks specific to LLM-based tools and agentic platforms. Required skills include digital forensics, cloud security forensics, and experience with EDR and CSPM tools like CrowdStrike Falcon and Wiz. You must possess deep knowledge of SIEM solutions like Splunk, networking fundamentals, and frameworks including MITRE ATT&CK, OWASP, and NIST.

What you'll do

  • Oversee and promptly respond to escalated security events and activate incident response plans.
  • Lead investigations to determine the root cause, scope, and impact of security incidents.
  • Use frontier AI platforms and AI SOC tools to accelerate triage, investigation, and documentation.
  • Respond to security incidents involving AI/LLM-based tools, including prompt injection and data leakage.
  • Develop and maintain incident response plans, procedures, and playbooks for regulatory compliance.
  • Mentor junior responders on incident handling techniques, forensic analysis, and cloud security.
  • Assess vulnerabilities and propose remediation strategies based on emerging security trends.

What we're looking for

  • 3-5 years of experience in a dedicated cybersecurity role with a strong emphasis on digital forensics and incident response.
  • 1-3 years of experience writing scripts or code to automate security work using AI coding assistants and AI SOC platforms.
  • Working knowledge of AI/LLM security risks and mitigations, including familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
  • Experience performing analysis and detection engineering using EDR or CSPM tools such as CrowdStrike Falcon and Wiz.
  • Experience securing and managing public cloud services (AWS, Azure, GCP) focusing on IAM, CI/CD pipelines, network security, and DLP.
  • Deep understanding of SIEM solutions such as Splunk or LogScale.
  • Hands-on experience triaging incidents with digital forensics tools and expertise in the security incident response lifecycle.
  • Bachelor's degree or higher in technology, computer science, cybersecurity, or a related field (preferred).
  • Possession of industry-recognized professional certifications such as AWS Security Specialty, GIAC, ISC2, or emerging AI security credentials (preferred).

More like this

Similar roles

Principal Security Engineer, Incident Response

F5 Inc

Seattle +1 24 days ago $182,200–$273,200
Incident Response Cybersecurity AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation FedRAMP NIST SP 800-61 ISO 27001 SOC 2 PCI-DSS MITRE ATT&CK Digital Forensics Load Balancing NGINX BIG-IP
10+ yrs exp Hybrid

Security Engineer, Incident Response

F5 Inc

Seattle +1 31 days ago $132,000–$198,000
Incident Response Security Operations (SOC) Threat Hunting Digital Forensics AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation MITRE ATT&CK NIST SP 800-61 ISO 27001 FedRAMP PCI-DSS NGINX BIG-IP
5+ yrs exp Hybrid

Senior Security Incident Response Engineer

Apple Inc

Seattle, WA 6 days ago $166,600–$250,700
Incident Response Security Engineering Intrusion Detection CI-CD Malware Analysis Digital Forensics Threat Intelligence Threat Modeling Identity Management SaaS OSCP GIAC CCNP CCIE
5+ yrs exp

Senior Security Incident Response Engineer

Apple Inc

Austin, TX 6 days ago
Incident Response Security Engineering Intrusion Detection Scripting CI-CD Malware Analysis Digital Forensics Threat Modeling Threat Intelligence Identity Management Cloud Control Planes SaaS OS Internals Data Analysis Automation
5+ yrs exp

Senior Security Engineer, Detection & Response

Robinhood

Bellevue, WA +2 45 days ago $187,000–$220,000
Incident Response Detection Engineering Kubernetes SOAR AI Threat Hunting Threat Intelligence Vulnerability Management Blockchain DeFi
5+ yrs exp Hybrid