Incident Response Engineer — Threat Hunting & Splunk Analytics

Piper Companies

United States

Remote

USD 130,000 - 160,000

Full time

3 days ago
Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical benefits
Dental benefits
Vision benefits
401(k)

Job summary

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The role focuses on detecting, investigating, and responding to security incidents across complex enterprise environments, including endpoints, networks, and cloud.

The ideal candidate has 5+ years in incident response, hands-on Splunk SPL, and experience with UEBA and CSIRT operations. This position offers a comprehensive benefits package and a salary range of $130,000–$160,000,

Qualifications

  • 5+ years of cybersecurity experience focusing on incident response and threat investigations.
  • Strong hands-on Splunk experience with SPL querying, dashboards, and detection engineering.
  • Experience with UEBA solutions and behavioral analytics platforms.
  • Proven threat hunting methodologies and investigation techniques.
  • Experience supporting or operating within a CSIRT environment.
  • Knowledge of endpoint, network, cloud, and identity-based attack vectors.
  • Familiarity with digital forensics, malware analysis, and threat intelligence processes.
  • Certifications such as GCIH, GCFA, GCIA, CISSP or equivalent preferred.

Responsibilities

  • Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
  • Perform proactive threat hunting to identify indicators of compromise and emerging threats.
  • Utilize UEBA platforms to detect anomalous user and entity behavior and validate events.
  • Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk.
  • Conduct forensic investigations and root cause analyses after security incidents.
  • Collaborate with CSIRT, SOC, and engineering teams to coordinate incident response.

Skills

Incident response
Threat hunting
Splunk SPL
UEBA platforms
CSIRT experience
Investigation techniques

Tools

Splunk
SIEM

Job description

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The role focuses on detecting, investigating, and responding to security incidents across complex enterprise environments, including endpoints, networks, and cloud.

The ideal candidate has 5+ years in incident response, hands-on Splunk SPL, and experience with UEBA and CSIRT operations. This position offers a comprehensive benefits package and a salary range of $130,000–$160,000,

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Remote Threat Hunter & Incident Response Specialist
Remote Threat Hunter & Incident Response Specialist

Piper Companies • United States

Remote
USD 120,000 - 180,000
Medical, dental, vision benefits
401(k)
PTO
Incident Response Engineer - 175966 - 176138
Incident Response Engineer - 175966 - 176138

Piper Companies • United States

Remote
USD 130,000 - 160,000
Medical benefits
Dental benefits
Vision benefits
+1
Remote Threat Hunter & Incident Response Investigator
Remote Threat Hunter & Incident Response Investigator

Piper Companies • United States

Remote
USD 120,000 - 180,000
Medical benefits
Dental benefits
401(k)
Threat Investigator
Threat Investigator

Piper Companies • United States

On-site
USD 120,000 - 180,000
Medical, dental, vision benefits
401(k)
PTO
Threat Investigator - 175638 - 176135
Threat Investigator - 175638 - 176135

Piper Companies • United States

Remote
USD 120,000 - 180,000
Medical benefits
Dental benefits
401(k)
Remote Threat Hunter | Splunk-SIEM Detective
Remote Threat Hunter | Splunk-SIEM Detective

Piper Companies • United States

Remote
USD 130,000 - 160,000
Health insurance
Vision insurance
Dental insurance
+4
Remote Threat Hunting Investigator (Insider Threat & Splunk)
Remote Threat Hunting Investigator (Insider Threat & Splunk)

Piper Companies • United States

Remote
USD 120,000 - 160,000
Detection & Threat Engineer - 175934 - 176137
Detection & Threat Engineer - 175934 - 176137

Piper Companies • United States

Remote
USD 130,000 - 160,000
Medical
Dental
Vision
+2
Threat Detection Engineer — Splunk, RBA & UEBA
Threat Detection Engineer — Splunk, RBA & UEBA

Piper Companies • United States

Remote
USD 130,000 - 160,000
Medical
Dental
Vision
+2
Threat Hunting Investigator - 176600
Threat Hunting Investigator - 176600

Piper Companies • United States

Remote
USD 120,000 - 160,000