Cyber Threat Investigator - Hybrid (RTP)

Piper Companies; North Carolina; Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Vision, Dental benefits

PTO & Paid Holidays

Hybrid work flexibility

Job summary

Piper Companies is seeking a Threat Investigator to join a growing cybersecurity client in the Raleigh-Durham area. The role requires working in a hybrid environment with onsite and remote responsibilities and focuses on investigating threats, analyzing incidents, and proactively identifying malicious activity across enterprise environments.

The ideal candidate has 4+ years of cyber threat experience, hands-on analysis of logs and telemetry, familiarity with MITRE ATT&CK, SIEM/EDR, and strong

Qualifications

• 4+ years of experience in cyber threat investigation, incident response, or security operations.
• Hands-on analysis of logs, alerts, endpoint telemetry, and network traffic.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and MITRE ATT&CK.
• Experience with SIEM, EDR, and threat intelligence platforms.

Responsibilities

• Perform in-depth investigations of security alerts, incidents, and anomalous activity to determine scope, impact, and root cause.
• Monitor threat intelligence feeds and leverage internal security tools to identify emerging risks and indicators of compromise.
• Conduct threat hunting across networks, endpoints, and cloud environments to uncover malicious behavior and security gaps.
• Collaborate with incident response, security operations, and infrastructure teams to contain, remediate, and prevent future security incidents.
• Develop detailed investigative reports and communicate findings, trends, and recommendations to technical and non-technical stakeholders.

Skills

Threat investigation

Incident response

Threat hunting

Security operations

Tools

SIEM

EDR

Threat intel platforms

Job description

Piper Companies is seeking a Threat Investigator to join a growing cybersecurity client in the Raleigh-Durham area. The role requires working in a hybrid environment with onsite and remote responsibilities and focuses on investigating threats, analyzing incidents, and proactively identifying malicious activity across enterprise environments.

The ideal candidate has 4+ years of cyber threat experience, hands-on analysis of logs and telemetry, familiarity with MITRE ATT&CK, SIEM/EDR, and strong