Insider Threat Engineer

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

Paid Time Off

Job summary

Piper Companies seeks an Insider Threat Engineer to identify, investigate, and mitigate insider threats using analytics, UEBA, and threat-detection tech. You will develop detections, hunt threats, and collaborate with security teams.

The role requires 4+ years in cybersecurity, strong SPL skills, and experience with UEBA platforms and SIEM. Compensation includes comprehensive benefits and a competitive salary.

Qualifications

• 4+ years in cybersecurity, threat detection, insider threat, or security operations roles.
• Strong hands-on experience writing and optimizing SPL queries.
• Experience with UEBA platforms such as Splunk UBA, Exabeam, Securonix, Microsoft Sentinel UEBA, or similar.

Responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).
• Monitor and investigate insider threat activity utilizing UEBA platforms.
• Analyze anomalous user behavior, data exfiltration attempts, policy violations, and other insider risk indicators.
• Create and optimize detection content, dashboards, and alerting mechanisms to improve threat visibility.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations and suspicious user behavior.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Skills

SPL querying

UEBA platforms

Threat hunting

Threat detection

SIEM basics

Tools

Splunk UBA

Exabeam

Securonix

Microsoft Sentinel UEBA

Job description

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. The Insider Threat Engineer will be responsible for identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies. This role is ideal for a security professional with strong SPL querying expertise and hands-on experience with UEBA platforms.

Responsibilities of the Insider Threat Engineer:

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).
• Monitor and investigate insider threat activity utilizing User and Entity Behavior Analytics (UEBA) platforms.
• Analyze anomalous user behavior, data exfiltration attempts, policy violations, and other insider risk indicators.
• Create and optimize detection content, dashboards, and alerting mechanisms to improve threat visibility.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations and suspicious user behavior.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Qualifications of the Insider Threat Engineer:

• 4+ years of experience in cybersecurity, threat detection, insider threat, or security operations roles.
• Strong hands-on experience writing and optimizing SPL queries.
• Experience working with UEBA platforms such as Splunk UBA, Exabeam, Securonix, Microsoft Sentinel UEBA, or similar technologies.
• Experience investigating insider threat incidents, user activity monitoring, and behavioral analytics.
• Knowledge of SIEM technologies, log analysis, and threat detection methodologies.
• Understanding of endpoint, network, cloud, and identity security monitoring.
• Experience conducting threat hunting and security investigations in enterprise environments.
• Strong analytical, documentation, and communication skills.
• Relevant security certifications such as Security+, CySA+, GCIH, GCFA, CISSP, or similar are preferred.

Compensation for the Insider Threat Engineer includes:

• Salary range: $120,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/16/2026. Applications for this job will be accepted for at least 30 days from the posting date.