Incident Response Engineer - 175966 - 176138 - 176546 - 177063

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

PTO

Job summary

Piper Companies seeks an Incident Response Engineer to join a leading cybersecurity-focused organization in the United States. You will detect, investigate, and respond to security incidents across complex enterprise environments.

The ideal candidate has deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics, with strong CSIRT experience and excellent documentation and communication skills.

Qualifications

• 5+ years of cybersecurity experience with incident response and threat investigations.
• Hands-on Splunk skills: advanced SPL querying, dashboards, detection engineering.
• Experience with UEBA solutions and behavioral analytics.
• CSIRT exposure or experience.
• Strong analytical, communication, and documentation skills.
• Preferred certifications such as GCIH, GCFA, GCIA, CISSP.

Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk.
• Conduct detailed forensic investigations and root cause analysis after incidents.
• Coordinate with CSIRT, SOC, and engineering teams for incident response.
• Create and maintain incident response playbooks and documentation.
• Provide recommendations for security improvements based on findings and threat intel.

Skills

Incident response

Threat hunting

UEBA platforms

Splunk analytics

Tools

Splunk

SPL queries

Dashboards

Detection engineering

Job description

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will play a critical role in detecting, investigating, and responding to security incidents across complex enterprise environments. This position is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics.

Responsibilities of the Incident Response Engineer

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting activities to identify indicators of compromise, malicious behavior, and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate potential security events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct detailed forensic investigations and root cause analysis following security incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate effective incident response efforts.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on investigation findings and threat intelligence.

Qualifications of the Incident Response Engineer

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Strong hands-on experience with Splunk, including advanced SPL querying, dashboard creation, and detection engineering.
• Experience working with UEBA solutions and behavioral analytics platforms.
• Proven expertise in threat hunting methodologies and investigation techniques.
• Experience supporting or operating within a CSIRT environment.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.
• Familiarity with SIEM technologies, digital forensics, malware analysis, and threat intelligence processes.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, or equivalent are preferred.

Compensation for the Incident Response Engineer includes

• Salary range: $130,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/23/2026. Applications for this job will be accepted for at least 30 days from the posting date.