Principal Incident Response Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $101.9k - $132.8k / year

⏰ Full Time

🔴 Lead

🚨 Incident Response Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blackbaud

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

☁️ SaaS

🤝 Non-profit

🤝 B2B

💰 $6.5M Series A on 2000-02

SaaS • Non-profit • B2B

Blackbaud is a cloud software company that builds intelligent solutions for social impact, focusing on nonprofit organizations. It provides products and services for fundraising, donor management, engagement, and sector-specific cloud solutions to help charities, educational institutions, and other mission-driven organizations move faster and work smarter. Blackbaud also offers training, support, developer resources, a partner marketplace, and industry research through the Blackbaud Institute. The company emphasizes privacy, security, and corporate social responsibility.

📋 Description

• Conduct in-depth analysis of security events and indicators to determine incident nature and severity • Respond promptly to security incidents using established incident response procedures • Coordinate with cross-functional teams to contain and mitigate cyber threats • Perform forensic investigations to determine incident root causes and develop remediation strategies • Lead regular threat hunts to identify and investigate detection gaps • Use threat intelligence and industry best practices to enhance incident detection capabilities • Collaborate on methods and procedures for recovery, preservation, and presentation of computer evidence while preventing spoliation

🎯 Requirements

• 8+ years of cyber incident response experience in a large and complex environment • Relevant industry certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH) • Subject matter expertise with SIEM, IDS/IPS, EDR, and network monitoring solutions • Strong knowledge of incident response methodologies, including containment, eradication, and recovery • Knowledge of common security frameworks including NIST, SANS, and CSA • Ability to acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries, and scripts • Experience with forensic tools such as EnCase, FTK, Axiom, and Cellebrite • Ability to collaborate with forensic analysts, law enforcement officers, and legal experts on computer evidence recovery, preservation, and presentation

🏖️ Benefits

• Medical, dental, and vision insurance • Remote-flexible workforce • Wellness Programs • 401(k) program with employer match • Flexible paid time off • Generous Parental Leave • Donations for Doers • Pet insurance, legal and identity protection • Tuition reimbursement program