Insider Threat Hunter & Threat Detection Lead (Remote)

Piper Companies; United States; Teletrabalho; USD 140 000 - 170 000; Tempo integral

Resumo da oferta

Piper Companies is seeking a Threat Hunting Investigator to lead insider threat investigations, threat hunting operations, and intellectual property protection initiatives. This remote US role collaborates with Security & Trust, Incident Detection & Response teams to identify and mitigate insider risks.

A full-time contract opportunity, with eligibility for security clearance. Responsibilities include developing advanced threat detections in Splunk ES/RBA, translating threat intel into scalable

Qualificações

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field.
• 8+ years of insider threat investigations experience.
• 8+ years of digital forensics and endpoint analysis experience.
• 5+ years engineering and operating Splunk detections (ES/RBA).
• Strong SPL, correlation searches, risk rules, and notable events.
• Experience with UEBA or behavioral analytics platforms.
• Experience with AWS CloudTrail, endpoint, identity, network, SaaS telemetry.

Responsabilidades

• Conduct proactive threat hunting focused on insider threats and IP theft.
• Analyze logs, telemetry, and endpoint data to identify suspicious activity.
• Perform digital investigations and forensic analysis for incident response.
• Develop investigative findings and clear technical reports for stakeholders.
• Design and maintain advanced detections in Splunk ES, RBA, and UEBA.
• Translate threat intel into scalable detection logic and response workflows.
• Tune detection content through testing and false-positive analysis.

Conhecimentos

Insider threat investigations

Splunk ES & RBA

SPL & correlation searches

UEBA/behavior analytics

Threat hunting

Incident response

Digital forensics

Data analysis

Formação académica

Bachelor's degree in Computer Science/Cybersecurity

Ferramentas

Splunk

AWS CloudTrail

Microsoft Defender

Code42

Digital Guardian

Descrição da oferta de emprego

Piper Companies is seeking a Threat Hunting Investigator to lead insider threat investigations, threat hunting operations, and intellectual property protection initiatives. This remote US role collaborates with Security & Trust, Incident Detection & Response teams to identify and mitigate insider risks.

A full-time contract opportunity, with eligibility for security clearance. Responsibilities include developing advanced threat detections in Splunk ES/RBA, translating threat intel into scalable