Insider Threat Security Engineer - 177304

Piper Companies; United States; Remote; USD 120,000 - 160,000; Part time

Benefits offered by this job

Medical benefits

Dental benefits

PTO and holidays

Job summary

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. The role focuses on detection, investigation, and remediation of insider threats within the CSIRT ecosystem.

This is a long-term remote contract opportunity for candidates located in the United States. The engineer will drive proactive threat hunting, develop detections in Splunk, and lead incident response from containment to post-incident review, collaborating with cross-functional

Qualifications

• 8+ years of cybersecurity-related experience including security operations, incident response, threat hunting, or insider threat programs.
• Strong hands-on experience with Splunk or comparable SIEM platforms (e.g., Microsoft Sentinel, QRadar, LogRhythm, Elastic).
• Proven ability to write and modify advanced SPL searches and detection logic.
• Experience using UBA/UEBA to identify insider risk and anomalies.
• Solid networking knowledge (TCP/IP, DNS, routing, switching, network security).
• Background in systems administration, network engineering, or infrastructure operations is highly valued.
• Demonstrated security investigations, threat hunting engagements, and incident response activities.

Responsibilities

• Investigate insider threat incidents as part of the CSIRT function.
• Conduct proactive threat hunting to uncover abnormal user behavior and risks.
• Lead response efforts from initial detection through containment, remediation and post-incident documentation.
• Develop, maintain, and optimize detections and dashboards using Splunk and other SIEMs.
• Utilize UBA/UEBA tech to identify insider risk across the environment.
• Collaborate with infrastructure, networking, and security teams to strengthen detection capabilities.
• Analyze logs, endpoint telemetry, and network data to support investigations and monitoring.

Skills

Splunk

SPL queries

Threat hunting

Incident response

CSIRT

UBA/UEBA

Network security basics

Security investigations

Tools

Splunk

Microsoft Sentinel

QRadar

LogRhythm

Elastic

Job description

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. This individual will play a key role within the Cyber Security Incident Response Team (CSIRT), focusing on the detection, investigation, and remediation of insider threats and other security incidents. This is a long-term remote contract opportunity available to candidates located within the United States.

Responsibilities of the Insider Threat Security Engineer:

• Investigate suspected and confirmed insider threat incidents as part of the organization's CSIRT function.
• Perform proactive threat hunting activities to identify abnormal user behavior and potential security risks.
• Lead incident response efforts from initial investigation through containment, remediation, and post-incident documentation.
• Develop, maintain, and optimize security detections, dashboards, and SPL queries within Splunk and other SIEM platforms.
• Utilize UBA and UEBA technologies to identify, analyze, and mitigate insider risk across the environment.
• Partner with infrastructure, networking, and security teams to investigate complex security events and strengthen detection capabilities.
• Analyze system logs, endpoint telemetry, network traffic, and other security data sources to support investigations and monitoring efforts.

Qualifications of the Insider Threat Security Engineer:

• 8+ years of experience in cybersecurity, security operations, incident response, threat hunting, or insider threat programs.
• Strong experience working with Splunk or comparable SIEM solutions such as Microsoft Sentinel, QRadar, LogRhythm, or Elastic.
• Proven ability to write and modify advanced SPL searches and detection logic.
• Hands-on experience investigating suspicious activity using UBA and/or UEBA platforms.
• Strong understanding of networking fundamentals including TCP/IP, DNS, routing, switching, and network security.
• Previous experience in systems administration, network engineering, or infrastructure operations is highly preferred.
• Demonstrated experience conducting security investigations, threat hunting engagements, and incident response activities.

Compensation & Benefits:

• $120,000 - $160,000
• Comprehensive benefits package including Medical, Dental, Vision, PTO, Paid Holidays, and additional leave offerings where applicable.

Keywords: Insider Threat, Threat Hunting, Incident Response, CSIRT, Splunk, SIEM, SPL, UEBA, UBA, Security Operations, Cybersecurity, Network Security, Security Investigations, Detection Engineering, Security Monitoring, Risk Management, Endpoint Security, Microsoft Sentinel, QRadar, LogRhythm, Elastic

#LI-KI1 #LI-REMOTE