BLACKCLOAK

Security Engineer

• Deploy and configure Endpoint Detection and Response (EDR) agents across client environments. Customize detection policies to minimize false positives and ensure seamless client business operations.
• Analyze EDR telemetry to detect "living off the land" attacks and anomalies that traditional antivirus would miss.
• Actively monitor client endpoints for malicious indicators. When threats are detected, immediately isolate compromised devices and communicate the scope of the incident to the customer and cross-functional teams supporting the customer.
• Generate monthly executive summaries for clients detailing blocked attacks, health status, and ROI on their security investment.
• Schedule and run next-gen vulnerability scans on client networks and execute penetration tests as applicable against client assets.. Review the results with the client's (or their IT point-of-contact), prioritize critical patches, and verify their remediation.
• Monitor for threats and vulnerabilities specific to “Smart Home” and Internet of Things (IoT), alert impacted clients, and assist clients in the hardening of their home networks and IoT devices.
• Proactively monitor the Dark Web and criminal forums for our clients' compromised credentials, leaked intellectual property, or domain spoofing.
• Work with cross-functional teams to alert clients immediately upon discovery of leaked data and provide specific instructions on changing passwords or locking down accounts.
• Manage the credit monitoring platform, and alert clients to changes in credit scores, new credit inquiries/accounts and other identity alerts that could indicate fraudulent activity.
• In conjunction with Client Success Managers, serve as the dedicated case manager for confirmed identity theft incidents. Handle the end-to-end resolution process so the client does not have to navigate the bureaucracy alone.
• Assist in the restoration of compromised accounts, including synthetic identity fraud, medical identity theft, and tax refund fraud.
• Actively hunt for client PII on people-search sites and data broker databases. Manage the "opt-out" and removal process to minimize their public attack surface.
• Identify repetitive manual tasks (e.g., alert triage, monthly reporting, initial containment) and build SOAR playbooks or scripts (Python/PowerShell) to automate them.
• Evaluate and implement AI-driven tools to enhance threat detection accuracy. Utilize Machine Learning features within our stack to reduce "alert fatigue" and false positives.
• Continuously assess our toolset's architecture. optimize API integrations between our Identity platforms, EDR, and ticketing systems to ensure we can handle increased client volume without linear headcount growth.
• Conduct "Post-Mortem" reviews after incidents or complex identity cases to identify process gaps, updating standard operating procedures (SOPs) to be faster and smarter next time.
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations
• Develop custom scripts, tools, or methodologies to enhance our Incident Response processes
• Develop comprehensive and accurate reports of forensic findings and Incident Response activities for both technical and executive audiences
• Be part of an on-call rotation and escalation team
• Participate in knowledge transfer sessions, product training and other strategic initiatives as needed
• Maintain working knowledge of BlackCloak’s solutions, platform features and best practices
• Mentor and support Client Success and Security Team Members
• Work closely with the engineering and product teams to continuously improve BlackCloak products
• Perform research and development on the latest cyber security attack and defense trends
• Work with the sales team to do technical demonstrations and provide subject matter expertise
• This position will require occasional time on nights and weekends to address client incidents, emergency onboardings and issues.

CyberSecurity Engineer, Identity Protection – Tier 3

Client Services Representative

• Participate in client onboarding sessions.
• Provide advice and guidance (and assist as needed) in the creation of client onboarding and follow-up materials/activities.
• Conduct periodic outreach to existing clients to ensure clients are utilizing the BlackCloak platform to its fullest extent.
• Partner with the Technical Success team in responding to customer inquiries and coordinating resources to meet those needs.
• Run client enablement and support sessions.
• Work with cross-functional teams to alert clients immediately upon discovery of new cyber or privacy threats and risks. Serve as a dedicated resource and point of contact to ensure the threats/risks are remediated or accepted by the client.
• Serve as a dedicated case manager for confirmed identity theft incidents. Handle the end-to-end resolution process so the client does not have to navigate the bureaucracy alone.
• Assist in the restoration of compromised accounts, including synthetic identity fraud, medical identity theft, and tax refund fraud.
• Support Account teams by pulling data for client reports and participate in Quarterly Business Reviews and other ad hoc client meetings as requested.
• Manage and record client interactions within the BlackCloak set of Client Success tools.
• Contribute to client communications and education initiatives.
• Maintain working knowledge of BlackCloak’s solutions, platform features, and best practices.
• Support external and internal customer-facing initiatives and events. There is a potential for limited travel.
• Participate in on-call shifts for client support, including nights and weekends, or as needed.

CyberSecurity Engineer, Identity Protection – Tier 3

Client Success Manager – Private Client Services