Detection & Threat Engineer - 175934 - 176137

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

PTO

Job summary

Piper Companies seeks a Detection & Threat Engineer in the United States to build advanced threat detections and enhance security monitoring across enterprise environments. The role focuses on writing SPL queries from scratch and implementing Risk-Based Alerting (RBA) and UEBA to improve threat visibility.

You will partner with Threat Hunting, Incident Response, and SOC teams to create proactive detection use cases, tune alerts, and support cloud, endpoint, identity, and network security

Qualifications

• 4+ years in Detection Engineering, Threat Detection, Threat Hunting, or Security Engineering.
• Advanced experience writing SPL queries from scratch in Splunk.
• Strong hands-on experience with Risk-Based Alerting (RBA) and UEBA.
• Experience developing detection logic and security use cases within Splunk Enterprise Security.
• Knowledge of threat actor TTPs and the MITRE ATT&CK framework.
• Experience supporting SOC, Incident Response, or Threat Hunting functions.
• Familiarity with cloud security, endpoint security, and identity security monitoring.
• Excellent analytical, troubleshooting, and communication skills.

Responsibilities

• Develop and maintain advanced detection content within Splunk Enterprise Security and related security platforms.
• Write complex SPL queries from scratch to identify threats, suspicious behaviors, and emerging attack techniques.
• Design, implement, and optimize Risk-Based Alerting (RBA) methodologies to improve detection fidelity and reduce alert fatigue.
• Leverage UEBA capabilities to identify anomalous user and entity behavior across enterprise environments.
• Partner with Threat Hunting, Incident Response, and Security Operations teams to improve detection coverage and investigation workflows.
• Analyze attack patterns and adversary techniques to create proactive detection use cases aligned with the MITRE framework.
• Continuously tune and enhance alerting logic to improve operational efficiency and threat visibility.
• Support detection engineering initiatives for cloud, endpoint, identity, and network security technologies.

Skills

SPL queries

Risk-Based Alerting

UEBA

Splunk Enterprise Security

Threat detection

Threat hunting

SOC/IR experience

MITRE ATT&CK

Tools

Splunk Enterprise Security

SPL

Job description

Piper Companies is seeking a Detection & Threat Engineer to join a leading cybersecurity-focused organization. The Detection & Threat Engineer will play a key role in developing advanced threat detections, enhancing security monitoring capabilities, and improving threat visibility across enterprise environments. This position is ideal for a security professional with strong experience writing SPL queries from scratch and hands-on expertise with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).

Responsibilities of the Detection & Threat Engineer:

• Develop and maintain advanced detection content within Splunk Enterprise Security and related security platforms.
• Write complex SPL queries from scratch to identify threats, suspicious behaviors, and emerging attack techniques.
• Design, implement, and optimize Risk-Based Alerting (RBA) methodologies to improve detection fidelity and reduce alert fatigue.
• Leverage UEBA capabilities to identify anomalous user and entity behavior across enterprise environments.
• Partner with Threat Hunting, Incident Response, and Security Operations teams to improve detection coverage and investigation workflows.
• Analyze attack patterns and adversary techniques to create proactive detection use cases aligned with the MIT&CK framework.
• Continuously tune and enhance alerting logic to improve operational efficiency and threat visibility.
• Support detection engineering initiatives for cloud, endpoint, identity, and network security technologies.

Qualifications of the Detection & Threat Engineer:

• 4+ years of experience in Detection Engineering, Threat Detection, Threat Hunting, or Security Engineering.
• Advanced experience writing SPL queries from scratch in Splunk.
• Strong hands-on experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).
• Experience developing detection logic and security use cases within Splunk Enterprise Security.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and the MIT&CK framework.
• Experience supporting SOC, Incident Response, or Threat Hunting functions.
• Familiarity with cloud security, endpoint security, and identity security monitoring.
• Excellent analytical, troubleshooting, and communication skills.

Compensation for the Detection & Threat Engineer includes:

• Salary range: $130,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/15/2026. Applications for this job will be accepted for at least 30 days from the posting date.