Senior Incident Response Lead: Forensics & Threat Hunting

Blackbaud; United States; Remote; USD 102,000 - 133,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Remote-flexible workforce

Wellness Programs

401(k) program with employer match

Flexible paid time off

Generous Parental Leave

Donations for Doers

Pet insurance, legal and identity保护

Job summary

Blackbaud seeks a Principal Incident Response Analyst for its Threat Detection & Response team. You will lead cyber incident response, digital forensic investigations, and threat hunting to protect critical information assets.

Ideal candidates have 8+ years in the field, with certifications such as CISSP, GCIH, GFCA, GREM, or ECIH. Strong SIEM/EDR skills and collaboration with law enforcement are valued.

Qualifications

• 8+ years of cyber incident response experience in large and complex environments.
• Certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH).
• Subject matter expertise with security tools and technologies (SIEM, IDS/IPS, EDR, network monitoring).
• Strong incident response methodologies including containment, eradication, recovery; familiarity with NIST, SANS, CSA.
• Experience with forensic tools such as Encase, FTK, Axiom, Cellebrite.
• Ability to collaborate with forensic analysts, law enforcement, and legal teams for evidence handling.

Responsibilities

• Conduct in-depth analysis of security events to determine incidents and severity.
• Respond promptly to security incidents following IR procedures.
• Coordinate with cross-functional teams to contain and mitigate threats.
• Perform forensic investigations to determine root cause and remediation strategies.
• Lead regular threat hunting activities to identify gaps in detection.
• Utilize threat intelligence to enhance incident detection capabilities.

Skills

Incident response

Digital forensics

Threat hunting

Security monitoring

Education

CISSP

GCIH

GFCA

GREM

ECIH

Tools

SIEM

IDS/IPS

EDR

Network monitoring

Job description

Blackbaud seeks a Principal Incident Response Analyst for its Threat Detection & Response team. You will lead cyber incident response, digital forensic investigations, and threat hunting to protect critical information assets.

Ideal candidates have 8+ years in the field, with certifications such as CISSP, GCIH, GFCA, GREM, or ECIH. Strong SIEM/EDR skills and collaboration with law enforcement are valued.