Insider Threat Security Engineer - 1773 - 177702

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental, Vision

PTO

Paid Holidays

Additional leave offerings

Job summary

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. This role focuses on detection, investigation, and remediation of insider threats within a CSIRT context, demanding hands-on threat hunting and incident response.

Remote contract opportunity within the United States is available. The candidate will develop detections and dashboards in Splunk and other SIEMs, implement UEBA/UBA approaches, and collaborate across teams to strengthen

Qualifications

• 8+ years in cybersecurity, security operations, incident response, threat hunting or insider threat programs.
• Experience writing advanced SPL searches and detection logic.
• Hands-on with UBA/UEBA platforms to identify insider risk.
• Strong networking fundamentals and collaboration with IT/security teams.

Responsibilities

• Investigate insider threat incidents as part of CSIRT.
• Perform proactive threat hunting to identify abnormal user behavior.
• Lead incident response from investigation through containment and remediation.
• Develop and optimize detections, dashboards, and SPL queries in SIEMs.
• Utilize UBA/UEBA to identify and mitigate insider risk across the environment.
• Collaborate with infrastructure, networking, and security teams on complex events.
• Analyze logs, endpoint telemetry, and network data to support investigations.

Skills

Threat hunting

Incident response

Insider threat

Security operations

UEBA/UBA

Threat detection

Tools

Splunk

Microsoft Sentinel

QRadar

LogRhythm

Elastic

Job description

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. This individual will play a key role within the Cyber Security Incident Response Team (CSIRT), focusing on the detection, investigation, and remediation of insider threats and other security incidents. The ideal candidate brings a strong blend of cybersecurity, systems, and networking experience, along with a hands-on approach to threat hunting and incident response. This is a long-term remote contract opportunity available to candidates located within the United States.

Responsibilities of the Insider Threat Security Engineer:

• Investigate suspected and confirmed insider threat incidents as part of the organization's CSIRT function.
• Perform proactive threat hunting activities to identify abnormal user behavior and potential security risks.
• Lead incident response efforts from initial investigation through containment, remediation, and post-incident documentation.
• Develop, maintain, and optimize security detections, dashboards, and SPL queries within Splunk and other SIEM platforms.
• Utilize UBA and UEBA technologies to identify, analyze, and mitigate insider risk across the environment.
• Partner with infrastructure, networking, and security teams to investigate complex security events and strengthen detection capabilities.
• Analyze system logs, endpoint telemetry, network traffic, and other security data sources to support investigations and monitoring efforts.

Qualifications of the Insider Threat Security Engineer:

• 8+ years of experience in cybersecurity, security operations, incident response, threat hunting, or insider threat programs.
• Strong experience working with Splunk or comparable SIEM solutions such as Microsoft Sentinel, QRadar, LogRhythm, or Elastic.
• Proven ability to write and modify advanced SPL searches and detection logic.
• Hands-on experience investigating suspicious activity using UBA and/or UEBA platforms.
• Strong understanding of networking fundamentals including TCP/IP, DNS, routing, switching, and network security.
• Previous experience in systems administration, network engineering, or infrastructure operations is highly preferred.
• Demonstrated experience conducting security investigations, threat hunting engagements, and incident response activities.

Compensation & Benefits:

• $120,000 - $160,000
• Comprehensive benefits package including Medical, Dental, Vision, PTO, Paid Holidays, and additional leave offerings where applicable.

Keywords: Insider Threat, Threat Hunting, Incident Response, CSIRT, Splunk, SIEM, SPL, UEBA, UBA, Security Operations, Cybersecurity, Network Security, Security Investigations, Detection Engineering, Security Monitoring, Risk Management, Endpoint Security, Microsoft Sentinel, QRadar, LogRhythm, Elastic

#LI-KI1 #LI-REMOTE