below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$152,988–$218,281.
Based on 240 similar postings.
Employer
About Intuit
Intuit is a financial software company known for products like TurboTax, QuickBooks, Mint, and Credit Karma, helping consumers and small businesses manage their finances and taxes. Industry: Financial Software & Technology
Intuit currently has
246 open roles
on FindRole.
Listed pay typically runs
$202,500–$274,000
across 228 roles with salary data.
The Senior Security Engineer - Digital Forensics and Incident Response (DFIR) joins the Security Operations Center (SOC) team to respond to cyber-attacks and manage the security incident response process. This role involves overseeing escalated security events, leading forensic analysis to determine root causes, and developing incident response playbooks. The engineer will build threat hunting capabilities and defend against emerging AI and agentic system risks, including data leakage and insecure output handling. Key technical requirements include proficiency in Bash, PowerShell, and Python for automation, alongside experience with CrowdStrike Falcon, Wiz, Splunk, and LogScale. The position requires expertise in cloud security for AWS, Azure, and GCP, as well as familiarity with frameworks like MITRE ATT&CK, OWASP Top 10 for LLM Applications, and NIST AI RMF.
What does a Security Engineer earn?
Median $193000 from 106 postings across 39 companies.
Oversee and promptly respond to escalated security events by activating the Security Incident Response Plan.
Lead forensic analysis to determine the root cause, scope, and impact of security incidents.
Investigate security incidents involving AI/LLM-based tools and agentic platforms.
Develop and maintain incident response plans, procedures, and playbooks for regulatory compliance.
Use AI SOC platforms and frontier AI tools to accelerate triage, detection tuning, and documentation.
Mentor and train incident responders on forensic analysis and cloud security best practices.
Execute hypothesis-driven threat hunts across endpoint, cloud, and network telemetry.
Assess vulnerabilities and propose remediation strategies based on emerging security trends.
What we're looking for
3-5 years of experience in a dedicated cybersecurity role with a strong emphasis on digital forensics and incident response.
1-3 years of experience writing scripts or code in Bash, PowerShell, or Python to automate security work.
Profound knowledge of digital forensics technologies, methodologies, and the Security Incident Response Lifecycle according to NIST or SANS.
Working knowledge of AI/LLM security risks and frameworks such as OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
Experience performing analysis and detection engineering using EDR or CSPM tools such as CrowdStrike Falcon and Wiz.
Experience using and defending Public Cloud services including AWS, Azure, and GCP.
Deep understanding of SIEM solutions such as Splunk and LogScale.
A Bachelor's degree or higher in Technology, Computer Science, Cybersecurity, or a related field, or equivalent hands-on experience (preferred).
Possession of industry-recognized professional certifications such as AWS Security Specialty, GCIH, GCFA, GFCE, CISSP, or emerging AI security credentials (preferred).