Remote Incident Response & Threat Investigator (MST/PST)

Piper Companies; United States; Remote; USD 125,000 - 175,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Sick leave

Job summary

Piper Companies seeks an IR & Threat Investigator to join a leading cybersecurity-focused organization. This fully remote role requires you to be located in MST or PST time zones to coordinate with enterprise security operations, incident response, and threat hunting efforts.

You bring 5+ years in cybersecurity, strong IT infra background, and hands-on experience with SIEM/EDR, threat intel, and MITRE ATT&CK, to detect, investigate, and remediate complex threats across cloud and on-prem

Qualifications

• 5+ years of cybersecurity experience with focus on incident response, threat detection, hunting, or investigation.
• Strong IT infrastructure experience across systems administration, networking, virtualization, and security.
• Hands-on with SIEM, EDR, log analysis, and forensic methodologies.
• Knowledge of MITRE ATT&CK and threat intelligence frameworks.

Responsibilities

• Investigate and respond to security incidents across enterprise environments, performing triage, containment, eradication, and recovery.
• Conduct threat hunting and investigations using SIEM, EDR, network, cloud, and endpoint telemetry.
• Analyze IOCs, TTPs, and emerging threats to proactively improve detection capabilities.
• Collaborate with infrastructure, cloud, and security teams to strengthen controls and incident readiness.
• Develop and maintain incident docs, investigation reports, and remediation recommendations.

Skills

Incident response

Threat detection

Threat hunting

Threat investigation

Log analysis

Forensic investigation

MITRE ATT&CK

Threat intelligence frameworks

Malware analysis concepts

Adversary behaviors

Cloud environments (Azure AWS GCP)

Tools

SIEM platforms

EDR solutions

Forensic investigation tools

Job description

Piper Companies seeks an IR & Threat Investigator to join a leading cybersecurity-focused organization. This fully remote role requires you to be located in MST or PST time zones to coordinate with enterprise security operations, incident response, and threat hunting efforts.

You bring 5+ years in cybersecurity, strong IT infra background, and hands-on experience with SIEM/EDR, threat intel, and MITRE ATT&CK, to detect, investigate, and remediate complex threats across cloud and on-prem