Sr. Security Engineer - Incident Response
Leads high-severity cyber and AI security incidents for F5, coordinating global response teams, managing crisis workflows, and driving post-incident improvements across corporate, cloud, and product environments.
- Compensation
- Not disclosed
- Location
- Warsaw
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 7+ years
- Category
- Security
- Posted
Skills
Must have
- 7+ years of cybersecurity experience, including strong expertise in incident response, security operations, threat hunting, vulnerability response, product security, or investigations
- Proven ability to lead complex incident response activities in SaaS, cloud, hybrid, multicloud, and customer-facing technology environments
- Strong knowledge of modern attack techniques, incident management, executive communications, cross-functional crisis coordination, workstream management, and stakeholder orchestration
- Understanding of application delivery and security architectures, including load balancing, reverse proxy, WAF, API security, DDoS protection, bot defense, Kubernetes ingress, and public cloud securit
- Experience conducting AI and security investigations using eReady, AWS, CrowdStrike, model invocation, identity and access, API gateway and application, agent/tool execution, data access and retrieval
- Ability to support global incident response operations from Poland, including collaboration across LATAM / Americas time zones
Nice to have
- Familiarity with NIST, ISO, SOC, PCI, and GDPR requirements
Full description
At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
Senior Incident Response — Poland
F5 Office of the CISO | Application Delivery, Security, and AI Resilience
Position Summary
We are seeking a senior Incident Response Lead based in Poland to serve as a dedicated incident command and response member within F5’s Office of the CISO. This role coordinates cross-functional response efforts across global teams, maintains incident command structure during active events, and ensures consistent communication, documentation, and resolution tracking across F5’s infrastructure, applications, products, and customer-facing environments.
The ideal candidate brings senior-level incident response experience, sound judgment under pressure, strong written and verbal communication, and the ability to drive complex incidents from detection through post-incident review. This role advances F5’s incident response execution and operational maturity across corporate, cloud, product, and customer-facing environments, including F5 BIG-IP, NGINX, Distributed Cloud, WAAP, API security, DDoS, bot defense, hybrid multicloud, and emerging AI-enabled services.
The role leads high-severity cyber and product security incident response, end-to-end cyber crisis management, workstream coordination, executive communications, and post-incident improvement. The successful candidate will partner across F5 security, product engineering, SRE, cloud operations, legal, privacy, communications, customer support, and business stakeholders to drive timely, coordinated response outcomes across regions and time zones.
Key ResponsibilitiesIncident Response Program Leadership
- Support F5’s incident response strategy, roadmap, governance, standards, playbooks, severity model, metrics, and executive reporting.
- Lead end-to-end response for cyber and product security incidents, including preparation, detection, containment, recovery, customer impact assessment, and post-incident learning.
- Manage cyber crises end to end by defining workstreams, driving decisions, coordinating cross-company and regional stakeholders, and maintaining executive visibility through resolution.
AI Security and Incident Response
- Build incident response capabilities for AI-enabled applications, models, agents, inference traffic, AI gateways, APIs, and runtime data paths secured or delivered through F5 technologies.