Senior Executive Incident Response Lead - Remote

BlackCloak, Inc.; United States; Remote; USD 105,000 - 115,000; Full time

Benefits offered by this job

Remote within USA

Medical/Dental/Vision

Health Savings Account

Flexible Vacation

Paid Holidays

Life/AD&D insurance

Disability Insurance

401k with employer match

Company Equity

Parental Leave

Off-sites and events

Home office stipend

Job summary

BlackCloak, Inc. is seeking a seasoned Senior Incident Responder to join our Technical Success Team.

This senior, client-facing role leads end-to-end incident response for high-profile clients, from initial triage through containment, eradication, recovery, and post-incident reporting. The role requires 5-8+ years in IR/DFIR, deep forensics expertise, and a proven track record handling sophisticated threats targeting executives.

Qualifications

• 5-8+ years in Incident Response, Digital Forensics (DFIR), or advanced cybersecurity analyst role.
• Proven track record across full incident lifecycle including personal/executive account takeovers, mobile threats, and endpoint malware.

Responsibilities

• Lead end-to-end incident handling from triage through containment, recovery, and post-incident lessons learned.
• Investigate complex compromises and targeted attacks, including compromised email ecosystems and fraud investigations.
• Analyze client devices to assess scope of compromise and remediation.
• Map attack chain against personal kill chain model to identify breach stages and remediation points.
• Provide white-glove client support and on-call escalation for emergencies.

Skills

Incident Response

Digital Forensics

Cybersecurity

Fraud Investigation

Client Communication

Executive Protection

Education

IT/CS/CE degree

Job description

BlackCloak, Inc. is seeking a seasoned Senior Incident Responder to join our Technical Success Team.

This senior, client-facing role leads end-to-end incident response for high-profile clients, from initial triage through containment, eradication, recovery, and post-incident reporting. The role requires 5-8+ years in IR/DFIR, deep forensics expertise, and a proven track record handling sophisticated threats targeting executives.