Insider Threat Analytics Engineer (SPL/UEBA)

Piper Companies; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Dental insurance

Vision insurance

401(k) plan

PTO

Job summary

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. The role focuses on identifying, investigating, and mitigating insider threats through advanced analytics, UEBA platforms, and SPL-based detections.

The ideal candidate has hands-on experience with UEBA solutions such as Splunk UBA, Exabeam, Securonix, or Microsoft Sentinel UEBA and a strong background in threat hunting and incident response within enterprise environments.

Qualifications

• 4+ years of experience in cybersecurity or threat detection.
• Hands-on experience writing and optimizing SPL queries.
• Experience with UEBA platforms such as Splunk UBA, Exabeam, Securonix, or Microsoft Sentinel UEBA.
• Knowledge of SIEM, log analysis, and threat detection methodologies.
• Strong analytical, documentation, and communication skills.
• Security certifications such as Security+, CySA+, GCIA, GCFA, CISSP preferred.

Responsibilities

• Develop and maintain detections and threat-hunting queries using SPL.
• Monitor insider threat activity using UEBA platforms.
• Analyze anomalous user behavior and data exfiltration indicators.
• Create and optimize detection content, dashboards, and alerts.
• Collaborate with SOC, IR, legal, HR, and Business teams during investigations.
• Conduct proactive threat hunting across enterprise environments.
• Support investigations and incident response related to insider threats.
• Document procedures and threat detection use cases.
• Recommend improvements to insider risk monitoring and controls.

Skills

SPL querying

Threat detection

Insider threat

Security operations

Threat hunting

Tools

Splunk UEBA

Exabeam

Securonix

Microsoft Sentinel UEBA

Job description

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. The role focuses on identifying, investigating, and mitigating insider threats through advanced analytics, UEBA platforms, and SPL-based detections.

The ideal candidate has hands-on experience with UEBA solutions such as Splunk UBA, Exabeam, Securonix, or Microsoft Sentinel UEBA and a strong background in threat hunting and incident response within enterprise environments.