Insider Threat Detection Engineer | UEBA & SPL Expert

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Job summary

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. This role focuses on identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies.

The ideal candidate has strong SPL querying expertise and hands‑on experience with UEBA platforms. The engineer will develop detections and threat-hunting queries, monitor insider threat activity, analyze anomalous user behavior,

Qualifications

• 4+ years in cybersecurity, threat detection, insider threat, or security operations.
• Proficient in writing and optimizing SPL queries.
• Experience with UEBA platforms such as Splunk UBA, Exabeam, Securonix, or Microsoft Sentinel UEBA.
• Knowledge of SIEM technologies, log analysis, and threat detection methodologies.

Responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).
• Monitor insider threat activity utilizing UEBA platforms.
• Analyze anomalous user behavior and data exfiltration attempts.
• Create and optimize detection content, dashboards, and alerting mechanisms.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Skills

SPL queries

Threat detection

Analytical thinking

Communication

Tools

Splunk UBA

Exabeam

Securonix

Microsoft Sentinel UEBA

Job description

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. This role focuses on identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies.

The ideal candidate has strong SPL querying expertise and hands‑on experience with UEBA platforms. The engineer will develop detections and threat-hunting queries, monitor insider threat activity, analyze anomalous user behavior,