Incident Response Engineer - 175966

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) plan

Paid time off

Job summary

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will detect, investigate, and respond to security incidents across complex enterprise environments.

This role is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics. The candidate will analyze endpoints, networks, cloud environments, and applications, performing proactive

Qualifications

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Hands-on experience with Splunk, advanced SPL querying, dashboards, and detection engineering.
• Experience with UEBA solutions and behavioral analytics platforms.
• Threat hunting methodologies and investigation techniques.
• Experience in CSIRT environments.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.

Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct forensic investigations and root-cause analysis following incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate incident response.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on findings and threat intelligence.

Skills

Incident response

Threat hunting

Splunk (SPL)

UEBA platforms

CSIRT experience

Endpoint security

Cloud security

Scripting (Python)

Communication

Documentation

Education

GCIH

GCFA

GCIA

CISSP

Tools

Splunk

SIEM

Job description

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will play a critical role in detecting, investigating, and responding to security incidents across complex enterprise environments. This position is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics.

Responsibilities of the Incident Response Engineer:

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting activities to identify indicators of compromise, malicious behavior, and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate potential security events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct detailed forensic investigations and root cause analysis following security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate effective incident response efforts.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on investigation findings and threat intelligence.

Qualifications of the Incident Response Engineer:

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Strong hands-on experience with Splunk, including advanced SPL querying, dashboard creation, and detection engineering.
• Experience working with UEBA solutions and behavioral analytics platforms.
• Proven expertise in threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with SIEM technologies, digital forensics, malware analysis, and threat intelligence processes.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, or equivalent are preferred.

Compensation for the Incident Response Engineer includes:

• Salary range: $130,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/09/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-JN1

#LI-REMOTE