Senior Incident Response Engineer - Remote Threat Hunting

Blackbaud; United States; Remote; USD 117,000 - 158,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Remote-flexible workforce

401(k) with employer match

Flexible paid time off

Generous parental leave

Tuition reimbursement program

Pet insurance

Job summary

Blackbaud is seeking a Principal Incident Response Engineer to lead digital forensics, incident response, and threat hunting for our Threat Detection & Response team. You will drive containment, remediation, and root-cause analysis across on-prem, hybrid, and cloud workloads.

You will guide high-severity incidents, coordinate with cross-functional teams, and advance AI/LLM integrations for stronger detection. We offer a remote-flexible workforce and a comprehensive benefits package.

Qualifications

• 8+ years of cyber incident response experience.
• Certifications such as CISSP, GCIH, GFCA, GREM, or ECIH are highly desirable.
• Proficient with security tools (SIEM/IDS/IPS/EDR) and cloud monitoring solutions.
• Solid knowledge of incident response lifecycle (containment, eradication, recovery) and common frameworks (NIST, SANS, CSA).
• Experience with digital forensics tools and procedures.

Responsibilities

• Lead in-depth analysis of security events to determine incident severity.
• Respond to incidents following established IR procedures.
• Act as technical lead for high-severity security incidents.
• Coordinate with cross-functional teams to contain and mitigate threats.
• Perform forensic investigations to determine root causes and remediation strategies across on-prem, hybrid, and cloud workloads.
• Lead intelligence-driven threat hunting to identify gaps in detection.
• Collaborate with detection engineering to improve MITRE ATT&CK coverage.
• Support AI/LLM workflows to enhance incident detection and response.
• Coordinate with law enforcement and legal teams for evidence handling and preservation.

Skills

Incident response

Digital forensics

Threat hunting

MITRE ATT&CK

AI/LLM workflows

Education

CISSP

GCIH

GFCA

GREM

ECIH

Tools

SIEM

IDS/IPS

EDR

Cloud monitoring

Job description

Blackbaud is seeking a Principal Incident Response Engineer to lead digital forensics, incident response, and threat hunting for our Threat Detection & Response team. You will drive containment, remediation, and root-cause analysis across on-prem, hybrid, and cloud workloads.

You will guide high-severity incidents, coordinate with cross-functional teams, and advance AI/LLM integrations for stronger detection. We offer a remote-flexible workforce and a comprehensive benefits package.