Principal Incident Response Analyst

Blackbaud; United States; Remote; USD 102,000 - 133,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Remote-flexible workforce

Wellness Programs

401(k) program with employer match

Flexible paid time off

Generous Parental Leave

Donations for Doers

Pet insurance, legal and identity保护

Job summary

Blackbaud seeks a Principal Incident Response Analyst for its Threat Detection & Response team. You will lead cyber incident response, digital forensic investigations, and threat hunting to protect critical information assets.

Ideal candidates have 8+ years in the field, with certifications such as CISSP, GCIH, GFCA, GREM, or ECIH. Strong SIEM/EDR skills and collaboration with law enforcement are valued.

Qualifications

• 8+ years of cyber incident response experience in large and complex environments.
• Certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH).
• Subject matter expertise with security tools and technologies (SIEM, IDS/IPS, EDR, network monitoring).
• Strong incident response methodologies including containment, eradication, recovery; familiarity with NIST, SANS, CSA.
• Experience with forensic tools such as Encase, FTK, Axiom, Cellebrite.
• Ability to collaborate with forensic analysts, law enforcement, and legal teams for evidence handling.

Responsibilities

• Conduct in-depth analysis of security events to determine incidents and severity.
• Respond promptly to security incidents following IR procedures.
• Coordinate with cross-functional teams to contain and mitigate threats.
• Perform forensic investigations to determine root cause and remediation strategies.
• Lead regular threat hunting activities to identify gaps in detection.
• Utilize threat intelligence to enhance incident detection capabilities.

Skills

Incident response

Digital forensics

Threat hunting

Security monitoring

Education

CISSP

GCIH

GFCA

GREM

ECIH

Tools

SIEM

IDS/IPS

EDR

Network monitoring

Job description

We are looking for an accomplished, high-performing Principal Incident Response Analyst for our Threat Detection & Response team with experience performing digital forensics, incident response, and threat hunting. The Principal Incident Response Analyst is responsible for ensuring the confidentiality, integrity, and availability of critical information and IT assets. This role requires a deep understanding of cybersecurity principles, incident response methodologies, digital forensics, and the ability to work efficiently under pressure.

What you’ll be doing:

• Conduct in-depth analysis of security events and indicators to determine the nature and severity of incidents.

• Respond promptly to security incidents, following established incident response procedures.

• Coordinate and collaborate with cross-functional teams to contain and mitigate cyber threats effectively.

• Perform forensic investigations to determine the root cause of incidents and develop appropriate remediation strategies.

• Lead regular threat hunt activities to identify and investigate gaps in detection.

• Utilize threat intelligence and industry best practices to enhance incident detection capabilities.

What we’ll want you to have:

• 8+ years of cyber incident response experience in a large and complex environment. Relevant industry certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH).

• Subject matter expertise with security tools and technologies, such as SIEM, IDS/IPS, EDR, and network monitoring solutions.

• Strong knowledge of incident response methodologies, including containment, eradication, recovery, and common security frameworks (NIST, SANS, CSA).

• Ability to acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts.

• Experience with forensic tools, such as Encase, FTK, Axiom, and Cellebrite to carry out digital forensic investigations.

• Collaborate with other forensic analysts, law enforcement officers, and legal experts to identify methods and procedures for recovery, preservation, and presentation of computer evidence, ensuring proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube

Blackbaud powers social impact through purpose‑driven technology and responsible AI. Guided by our Intelligence for Good® vision, we’re building a culture where innovation, trust, and human expertise come together to help organizations make a greater difference in the world.

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

The starting base pay is $101,900.00 to $132,800.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-flexible workforce

• Wellness Programs

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Donations for Doers

• Pet insurance, legal and identity protection

• Tuition reimbursement program