Insider Threat Security Engineer - 1765 - 177220

Piper Companies; United States; Remote; USD 120,000 - 160,000; Part time

Benefits offered by this job

Remote work (US)

Job summary

Piper Companies is seeking an Insider Threat Security Engineer to join a leading technology organization. This role is a remote opportunity within the United States and sits on the CSIRT, tackling insider threats and security monitoring.

You will investigate incidents, lead threat hunts, and develop SIEM detections using Splunk, QRadar, or similar platforms, while applying UEBA/UBA tools to reduce enterprise risk.

Qualifications

• Minimum 8+ years in cybersecurity, incident response, threat hunting or related fields.
• Hands-on experience with SIEM platforms and SPL query development.
• Experience using UEBA/UBA to detect insider or anomalous activity.
• Strong foundation in networking concepts and security operations.

Responsibilities

• Investigate insider security incidents as part of CSIRT.
• Lead threat hunts and identify anomalous user behavior enterprise-wide.
• Coordinate containment, remediation and documentation of security events.
• Develop and optimize SIEM detections and SPL queries.
• Leverage UBA/UEBA tools to detect insider threats and reduce risk.
• Collaborate with infrastructure and security teams to improve detections.
• Analyze logs, network traffic, and endpoint telemetry to support investigations.

Skills

Cybersecurity experience

Threat hunting

Incident response

SIEM SPL

UBA/UEBA

Networking basics

Tools

Splunk

QRadar

LogRhythm

Microsoft Sentinel

Elastic

Job description

Piper Companies is seeking an Insider Threat Security Engineer to join a leading technology organization. The Insider Threat Security Engineer will serve as a critical member of the Computer Security Incident Response Team (CSIRT), focusing on identifying, investigating, and mitigating internal security threats while helping reduce risk across the enterprise. This role is ideal for a hands‑on security professional with a strong background spanning systems, networking, and cybersecurity operations. The Insider Threat Security Engineer role is a long term contract opportunity and allows you to work remote in the United States.

Responsibilities of the Insider Threat Security Engineer:

• Investigate actual and suspected insider security incidents as part of the Computer Security Incident Response Team (CSIRT).
• Conduct threat hunting activities and proactively identify anomalous user behavior across the enterprise environment.
• Lead incident response efforts including investigation, containment, remediation, and documentation of security events.
• Develop, optimize, and maintain SIEM detections and custom SPL queries to identify suspicious activity.
• Utilize User Behavior Analytics (UBA) and User & Entity Behavior Analytics (UEBA) tools to detect insider threats and reduce organizational risk.
• Collaborate with infrastructure, networking, and security teams to investigate complex incidents and improve detection capabilities.
• Analyze logs, network traffic, system activity, and endpoint telemetry to support investigations and security monitoring efforts.

Requirements of the Insider Threat Security Engineer:

• 8+ years of experience in cybersecurity, incident response, threat hunting, security operations, or insider threat programs.
• Hands‑on experience with Splunk or comparable SIEM platforms such as QRadar, LogRhythm, Microsoft Sentinel, or Elastic.
• Ability to create and modify SPL queries from scratch.
• Experience utilizing UBA and/or UEBA solutions to investigate suspicious user activity.
• Strong understanding of networking concepts including TCP/IP, DNS, routing, switching, and network security fundamentals.
• Background in systems administration, network engineering, or infrastructure operations prior to moving into security is highly preferred.
• Experience performing hands‑on security investigations, threat hunting, and incident response activities.

Compensation for the Insider Threat Security Engineer:

• $120,000 - $160,000
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.

Keywords: Insider Threat, Security Engineer, CSIRT, Incident Response, Threat Hunting, Splunk, SPL, SIEM, User Behavior Analytics, UBA, UEBA, Insider Risk Management, Security Operations Center, SOC, Cybersecurity, Security Investigations, Log Analysis, Network Security, Systems Administration, Network Engineering, Endpoint Security, Threat Detection, Security Monitoring, Security Analytics, TCP/IP, DNS, Microsoft Sentinel, QRadar, LogRhythm, Elastic, Security Operations, Risk Management

This job opens for applications on 10/26/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-AG1

#REMOTE