Senior Executive Incident Responder

Remote; San Francisco (CA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote Company in USA

Medical/Dental/Vision plans

Health Savings Account

Flexible vacation

10 paid holidays

Life/AD&D & Disability Insurance

401k with match

Company equity

Parental & pregnancy recovery leave

Off-sites & virtual events

Home office stipend

Job summary

BlackCloak is seeking a seasoned Senior Incident Responder to lead the full incident lifecycle for high-profile clients. You will own triage, containment, eradication, recovery, and post-incident reporting, serving as escalation lead and primary investigator for complex events.

This client-facing role requires deep DFIR expertise, experience with executive-level breaches, and a track record in fraud investigations.

Qualifications

• 5-8+ years in Incident Response, Digital Forensics (DFIR), or advanced cybersecurity analyst roles.
• Proven track record in full incident lifecycle: triage, containment, eradication, recovery, post-incident reporting.
• Experience investigating fraud in financial transactions; coordination with banks/issuers is a plus.
• Deep technical expertise across Windows, macOS, iOS, Android, Linux in forensics and vulnerability management.
• Strong communication skills; translate complex threat assessments for non-technical clients.

Responsibilities

• Lead end-to-end incident handling per IR principles (NIST/SANS).
• Investigate complex compromises and targeted attacks (email, SIM swap, fraud, credential harvesting).
• Analyze client devices to determine scope and remediation steps.
• Assist with fraud investigations, disputes, and account freeze processes with platforms.
• Map attack kill chain against personal contexts to identify mitigation steps.
• Provide white-glove client support during emergencies and onboardings.
• Participate in on-call rotations including nights/weekends.
• Mentor team members to raise overall technical proficiency.
• Oversee network vulnerability scans and continuously improve IR playbooks.

Skills

Incident Response

Digital Forensics

Cybersecurity

Fraud Investigation

Communication

Education

Bachelor's degree in IT/CS/CE

Job description

BlackCloak is seeking a seasoned Senior Incident Responder to lead the full incident lifecycle for high-profile clients. You will own triage, containment, eradication, recovery, and post-incident reporting, serving as escalation lead and primary investigator for complex events.

This client-facing role requires deep DFIR expertise, experience with executive-level breaches, and a track record in fraud investigations.