Incident Response Engineer

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Job summary

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will play a critical role in detecting, investigating, and responding to security incidents across complex enterprise environments.

This position is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics.

Qualifications

• 5+ years of cybersecurity experience with focus on incident response and threat investigations.
• Strong hands-on experience with Splunk, including advanced SPL querying, dashboard creation, and detection engineering.
• Experience with UEBA solutions and behavioral analytics platforms.
• Proven expertise in threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with SIEM technologies, digital forensics, malware analysis, and threat intelligence processes.
• Strong analytical, communication, and documentation skills.
• Certifications such as GCIH, GCFA, GCIA, CISSP or equivalent preferred.

Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate security events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk.
• Conduct detailed forensic investigations and root cause analysis following security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate incident response efforts.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on investigation findings and threat intelligence.

Skills

Incident response

Threat hunting

Splunk analytics

UEBA

CSIRT

Tools

Splunk

UEBA platforms

SIEM

Digital forensics

Job description

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will play a critical role in detecting, investigating, and responding to security incidents across complex enterprise environments. This position is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics.

Responsibilities of the Incident Response Engineer:

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting activities to identify indicators of compromise, malicious behavior, and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate potential security events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct detailed forensic investigations and root cause analysis following security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate effective incident response efforts.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on investigation findings and threat intelligence.

Qualifications of the Incident Response Engineer:

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Strong hands-on experience with Splunk, including advanced SPL querying, dashboard creation, and detection engineering.
• Experience working with UEBA solutions and behavioral analytics platforms.
• Proven expertise in threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with SIEM technologies, digital forensics, malware analysis, and threat intelligence processes.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, or equivalent are preferred.

Compensation for the Incident Response Engineer includes:

• Salary range: $130,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/06/2026. Applications for this job will be accepted for at least 30 days from the posting date.