Remote Incident Response Engineer - Splunk & Threat Hunting

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) plan

Paid time off

Job summary

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will detect, investigate, and respond to security incidents across complex enterprise environments.

This role is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics. The candidate will analyze endpoints, networks, cloud environments, and applications, performing proactive

Qualifications

• 5+ years of cybersecurity experience with a focus on incident response and threat investigations.
• Hands-on experience with Splunk, advanced SPL querying, dashboards, and detection engineering.
• Experience with UEBA solutions and behavioral analytics platforms.
• Threat hunting methodologies and investigation techniques.
• Experience in CSIRT environments.
• Knowledge of endpoint, network, cloud, and identity-based attack vectors.

Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents across endpoints, networks, cloud environments, and enterprise applications.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats.
• Utilize UEBA platforms to detect anomalous user and entity behavior and validate events.
• Develop and optimize SPL queries, dashboards, alerts, and reports within Splunk to improve detection capabilities.
• Conduct forensic investigations and root-cause analysis following incidents.
• Collaborate with CSIRT, SOC, and engineering teams to coordinate incident response.
• Create and maintain incident response playbooks, procedures, and documentation.
• Provide recommendations for security improvements based on findings and threat intelligence.

Skills

Incident response

Threat hunting

Splunk (SPL)

UEBA platforms

CSIRT experience

Endpoint security

Cloud security

Scripting (Python)

Communication

Documentation

Education

GCIH

GCFA

GCIA

CISSP

Tools

Splunk

SIEM

Job description

Piper Companies is seeking an Incident Response Engineer to join a leading cybersecurity-focused organization. The Incident Response Engineer will detect, investigate, and respond to security incidents across complex enterprise environments.

This role is ideal for a security professional with deep expertise in incident response, threat hunting, UEBA platforms, and advanced Splunk analytics. The candidate will analyze endpoints, networks, cloud environments, and applications, performing proactive