Insider Threat Analytics Engineer: UEBA & Threat Hunting

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

Paid Time Off

Job summary

Piper Companies seeks an Insider Threat Engineer to identify, investigate, and mitigate insider threats using analytics, UEBA, and threat-detection tech. You will develop detections, hunt threats, and collaborate with security teams.

The role requires 4+ years in cybersecurity, strong SPL skills, and experience with UEBA platforms and SIEM. Compensation includes comprehensive benefits and a competitive salary.

Qualifications

• 4+ years in cybersecurity, threat detection, insider threat, or security operations roles.
• Strong hands-on experience writing and optimizing SPL queries.
• Experience with UEBA platforms such as Splunk UBA, Exabeam, Securonix, Microsoft Sentinel UEBA, or similar.

Responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).
• Monitor and investigate insider threat activity utilizing UEBA platforms.
• Analyze anomalous user behavior, data exfiltration attempts, policy violations, and other insider risk indicators.
• Create and optimize detection content, dashboards, and alerting mechanisms to improve threat visibility.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations and suspicious user behavior.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Skills

SPL querying

UEBA platforms

Threat hunting

Threat detection

SIEM basics

Tools

Splunk UBA

Exabeam

Securonix

Microsoft Sentinel UEBA

Job description

Piper Companies seeks an Insider Threat Engineer to identify, investigate, and mitigate insider threats using analytics, UEBA, and threat-detection tech. You will develop detections, hunt threats, and collaborate with security teams.

The role requires 4+ years in cybersecurity, strong SPL skills, and experience with UEBA platforms and SIEM. Compensation includes comprehensive benefits and a competitive salary.