Incident Response Engineer - 175966 - 176138

Piper Companies; United States; A distancia; USD 130.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical benefits

Dental benefits

Vision benefits

401(k)

Descripción de la vacante

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The role focuses on detecting, investigating, and responding to security incidents across complex enterprise environments, including endpoints, networks, and cloud.

The ideal candidate has 5+ years in incident response, hands-on Splunk SPL, and experience with UEBA and CSIRT operations. This position offers a comprehensive benefits package and a salary range of $130,000–$160,000,

Formación

• 5+ years of cybersecurity experience focusing on incident response and threat investigations.
• Strong hands-on Splunk experience with SPL querying, dashboards, and detection engineering.
• Experience with UEBA solutions and behavioral analytics platforms.
• Proven threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with digital forensics, malware analysis, and threat intelligence processes.
• Certifications such as GCIH, GCFA, GCIA, CISSP or equivalent preferred.

Responsabilidades

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk.
• Conduct forensic investigations and root cause analyses after security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate incident response.

Conocimientos

Incident response

Threat hunting

Splunk SPL

UEBA platforms

CSIRT experience

Investigation techniques

Herramientas

Splunk

SIEM

Descripción del empleo

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will play a critical role in detecting, investigating, and responding to security incidents across complex enterprise environments. This position is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics.

Responsibilities of the Incident Response Engineer:

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting activities to identify indicators of compromise, malicious behavior, and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate potential security events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct detailed forensic investigations and root cause analysis following security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate effective incident response efforts.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on investigation findings and threat intelligence.

Qualifications of the Incident Response Engineer:

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Strong hands-on experience with Splunk, including advanced SPL querying, dashboard creation, and detection engineering.
• Experience working with UEBA solutions and behavioral analytics platforms.
• Proven expertise in threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with SIEM technologies, digital forensics, malware analysis, and threat intelligence processes.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, or equivalent are preferred.

Compensation for the Incident Response Engineer includes:

• Salary range: $130,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/15/2026. Applications for this job will be accepted for at least 30 days from the posting date.