Note: The job is a remote job and is open to candidates in USA. Blackbaud powers social impact through purpose-driven technology and responsible AI. The Principal Incident Response Analyst will protect critical information and IT assets through advanced security event analysis, incident response, digital forensics, and threat hunting. The role also involves coordinating with cross-functional teams, using threat intelligence, and developing remediation strategies for cyber threats.
Responsibilities
- Conduct in-depth analysis of security events and indicators to determine the nature and severity of incidents
- Respond promptly to security incidents, following established incident response procedures
- Coordinate and collaborate with cross-functional teams to contain and mitigate cyber threats effectively
- Perform forensic investigations to determine the root cause of incidents and develop appropriate remediation strategies
- Lead regular threat hunt activities to identify and investigate gaps in detection
- Utilize threat intelligence and industry best practices to enhance incident detection capabilities
Skills
- 8+ years of cyber incident response experience in a large and complex environment
- Subject matter expertise with security tools and technologies, such as SIEM, IDS/IPS, EDR, and network monitoring solutions
- Strong knowledge of incident response methodologies, including containment, eradication, recovery, and common security frameworks (NIST, SANS, CSA)
- Ability to acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts
- Experience with forensic tools, such as Encase, FTK, Axiom, and Cellebrite to carry out digital forensic investigations
- Collaborate with other forensic analysts, law enforcement officers, and legal experts to identify methods and procedures for recovery, preservation, and presentation of computer evidence, ensuring proper precautions are taken in the preservation and prevention of spoliation of electronic evidence
- Relevant industry certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH)
Benefits
- Medical, dental, and vision insurance
- Remote-flexible workforce
- Wellness Programs
- 401(k) program with employer match
- Flexible paid time off
- Generous Parental Leave
- Donations for Doers
- Pet insurance, legal and identity protection
- Tuition reimbursement program
Company Overview
Company H1B Sponsorship