Principal Incident Response Lead — Remote & Threat Hunting

Blackbaud; United States; Hybride; USD 117 000 - 158 000; Plein temps

Avantages offerts par ce poste

Medical Insurance

Remote-friendly workforce

Wellness Programs

401(k) Match

Flexible PTO

Parental Leave

Donations for Doers

Pet Insurance

Identity Protection

Tuition Reimbursement

Résumé du poste

Blackbaud is seeking a Principal Incident Response Engineer to lead detection and response efforts, perform digital forensics, and drive threat hunting across on-prem, hybrid, and cloud environments.

You will act as the technical lead for high-severity incidents and collaborate with cross-functional teams to contain, eradicate, and recover from cyber threats, while advancing AI/LLM workflows to improve detection capabilities.

Qualifications

• 8+ years of cyber incident response experience in a relevant environment.
• Hit with industry certifications such as CISSP, GCIH, GFCA, GREM, or ECIH is highly desirable.
• Subject matter expertise with security tools (SIEM, IDS/IPS, EDR) and cloud monitoring.
• Strong knowledge of incident response methodologies (containment, eradication, recovery) and frameworks (NIST, SANS, CSA).
• Ability to acquire and analyze endpoint and network artifacts, memory, and malware/scripts.

Responsabilités

• Lead high-severity security incidents as technical lead and coordinate containment.
• Perform forensic investigations to determine root cause and remediation steps.
• Collaborate with cross-functional teams to mitigate threats across on-prem, hybrid, and cloud workloads.
• Conduct intelligence-driven threat hunts to identify gaps in detection.
• Enhance coverage with MITRE ATT&CK mapping and develop AI/LLM workflows for detection.
• Support on-call rotations and work with law enforcement and legal teams as needed.

Connaissances

Incident response leadership

Threat hunting

Digital forensics

MITRE ATT&CK knowledge

Cloud monitoring

Outils

SIEM

EDR

IDS/IPS

EnCase

FTK

Axiom

Cellebrite

Description du poste

Blackbaud is seeking a Principal Incident Response Engineer to lead detection and response efforts, perform digital forensics, and drive threat hunting across on-prem, hybrid, and cloud environments.

You will act as the technical lead for high-severity incidents and collaborate with cross-functional teams to contain, eradicate, and recover from cyber threats, while advancing AI/LLM workflows to improve detection capabilities.