Insider Threat Engineer - 176675 - 177069

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Job summary

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. This role focuses on identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies.

The ideal candidate has strong SPL querying expertise and hands‑on experience with UEBA platforms. The engineer will develop detections and threat-hunting queries, monitor insider threat activity, analyze anomalous user behavior,

Qualifications

• 4+ years in cybersecurity, threat detection, insider threat, or security operations.
• Proficient in writing and optimizing SPL queries.
• Experience with UEBA platforms such as Splunk UBA, Exabeam, Securonix, or Microsoft Sentinel UEBA.
• Knowledge of SIEM technologies, log analysis, and threat detection methodologies.

Responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).
• Monitor insider threat activity utilizing UEBA platforms.
• Analyze anomalous user behavior and data exfiltration attempts.
• Create and optimize detection content, dashboards, and alerting mechanisms.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Skills

SPL queries

Threat detection

Analytical thinking

Communication

Tools

Splunk UBA

Exabeam

Securonix

Microsoft Sentinel UEBA

Job description

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. The Insider Threat Engineer will be responsible for identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies. This role is ideal for a security professional with strong SPL querying expertise and hands‑on experience with UEBA platforms.

Responsibilities of the Insider Threat Engineer:

• Develop and maintain detections, correlation searches, and threat‑hunting queries using SPL (Search Processing Language).
• Monitor and investigate insider threat activity utilizing User and Entity Behavior Analytics (UEBA) platforms.
• Analyze anomalous user behavior, data exfiltration attempts, policy violations, and other insider risk indicators.
• Create and optimize detection content, dashboards, and alerting mechanisms to improve threat visibility.
• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.
• Conduct proactive threat hunting activities across enterprise environments.
• Support incident response activities related to insider threat investigations and suspicious user behavior.
• Develop and maintain documentation, investigation procedures, and threat detection use cases.
• Recommend improvements to insider risk monitoring capabilities and security controls.

Qualifications of the Insider Threat Engineer:

• 4+ years of experience in cybersecurity, threat detection, insider threat, or security operations roles.
• Strong hands‑on experience writing and optimizing SPL queries.
• Experience working with UEBA platforms such as Splunk UBA, Exabeam, Securonix, Microsoft Sentinel UEBA, or similar technologies.
• Experience investigating insider threat incidents, user activity monitoring, and behavioral analytics.
• Knowledge of SIEM technologies, log analysis, and threat detection methodologies.
• Understanding of endpoint, network, cloud, and identity security monitoring.
• Experience conducting threat hunting and security investigations in enterprise environments.
• Strong analytical, documentation, and communication skills.
• Relevant security certifications such as Security+, CySA+, GCIH, GCFA, CISSP, or similar are preferred.

Compensation for the Insider Threat Engineer includes:

• Salary range: $120,000 - $160,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/23/2026. Applications for this job will be accepted for at least 30 days from the posting date.