{"id":2529509,"url":"https://alion.io/job/blackbaud-principal-incident-response-engineer","title":"Principal Incident Response Engineer","company":{"id":36535,"name":"Blackbaud","domain":"blackbaud.com","url":"https://alion.io/company/blackbaud","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":117200,"max":157500,"currency":"USD","period":"year","gross":null,"usd_annual":157500},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"EnCase","optional":true},{"name":"FTK","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-23T00:00:00Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-14T16:59:24Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"About the role:\nWe are looking for an accomplished, high-performing Principal Incident Response Engineer for our Threat Detection & Response team with experience performing digital forensics, incident response, and threat hunting.\nThe Principal Incident Response Engineer is responsible for ensuring the confidentiality, integrity, and availability of critical information and IT assets. This role requires a deep understanding of cybersecurity principles, incident response methodologies, digital forensics, and the ability to work efficiently under pressure.\nWhat you'll be doing:\nConduct in-depth analysis of security events and indicators to determine the nature and severity of incidents.\nRespond promptly to security incidents, following established incident response procedures.\nServe as the technical lead for high-severity security incidents. Coordinate and collaborate with cross-functional teams to contain and mitigate cyber threats effectively.\nPerform forensic investigations to determine the root cause of incidents and develop appropriate remediation strategies across on-prem, hybrid, and cloud workloads\nLead regular intelligence-driven threat hunt activities to identify and investigate gaps in detection.\nPartner with detection engineering to increase coverage across MITRE ATT&CK framework\nIdentify, scope, and support the development of AI/LLM workflows to enhance incident detection and response capabilities.\nCollaborate with other forensic analysts, law enforcement officers, and legal experts to identify methods and procedures for recovery, preservation, and presentation of computer evidence, ensuring proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.\nSupport On-call rotation as applicable\nWhat we'll want you to have:\n8+ years of cyber incident response experience in a relevant environment. Cyber industry certifications are highly desirable (CISSP, GCIH, GFCA, GREM, ECIH).\nSubject matter expertise with security tools and technologies, such as SIEM, IDS/IPS, EDR, and cloud monitoring solutions.\nStrong knowledge of incident response methodologies, including containment, eradication, recovery, and common security frameworks (NIST, SANS, CSA).\nAbility to acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts.\nExperience with forensic tools, such as Encase, FTK, Axiom, and Cellebrite to carry out digital forensic investigations.\nStay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube\nBlackbaud powers social impact through purpose-driven technology and responsible AI. Guided by our Intelligence for Good® vision, we’re building a culture where innovation, trust, and human expertise come together to help organizations make a greater difference in the world.\nBlackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.\nThe starting base pay is $117,200.00 to $157,500.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.Benefits Include:\nMedical, dental, and vision insurance\n\nRemote-flexible workforce\n\nWellness Programs\n\n401(k) program with employer match\n\nFlexible paid time off\n\nGenerous Parental Leave\n\nDonations for Doers\n\nPet insurance, legal and identity protection\n\nTuition reimbursement program","description_format":"text","description_chars":3750,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave","Vision insurance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Artificial Intelligence","Nonprofits & Foundations","Nonprofit, Church & Membership Software"],"lifecycle":[{"event":"open","at":"2026-10-14T12:35:29Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.728,"p_room":0.75,"age_days":21,"expected_fill_days":26,"reasons":["conf:3","win:late"],"computed_at":"2026-10-14T20:43:33Z"},"pay":{"stated_usd_annual":157500,"is_top_pay":false},"html_url":"https://alion.io/job/blackbaud-principal-incident-response-engineer","json_url":"https://alion.io/job/blackbaud-principal-incident-response-engineer.json","meta":{"generated_at":"2026-10-14T20:43:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27639,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":36535},"rest":"https://alion.io/mcp/rest/get_company?id=36535"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblackbaud-principal-incident-response-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblackbaud-principal-incident-response-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblackbaud-principal-incident-response-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blackbaud-principal-incident-response-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblackbaud-principal-incident-response-engineer"}]}