Remote Insider Threat Engineer | CSIRT & Threat Hunting

Piper Companies; United States; Remote; USD 120.000 - 160.000; Teilzeit

Benefits dieser Stelle

Remote work (US)

Zusammenfassung

Piper Companies is seeking an Insider Threat Security Engineer to join a leading technology organization. This role is a remote opportunity within the United States and sits on the CSIRT, tackling insider threats and security monitoring.

You will investigate incidents, lead threat hunts, and develop SIEM detections using Splunk, QRadar, or similar platforms, while applying UEBA/UBA tools to reduce enterprise risk.

Qualifikationen

• Minimum 8+ years in cybersecurity, incident response, threat hunting or related fields.
• Hands-on experience with SIEM platforms and SPL query development.
• Experience using UEBA/UBA to detect insider or anomalous activity.
• Strong foundation in networking concepts and security operations.

Aufgaben

• Investigate insider security incidents as part of CSIRT.
• Lead threat hunts and identify anomalous user behavior enterprise-wide.
• Coordinate containment, remediation and documentation of security events.
• Develop and optimize SIEM detections and SPL queries.
• Leverage UBA/UEBA tools to detect insider threats and reduce risk.
• Collaborate with infrastructure and security teams to improve detections.
• Analyze logs, network traffic, and endpoint telemetry to support investigations.

Kenntnisse

Cybersecurity experience

Threat hunting

Incident response

SIEM SPL

UBA/UEBA

Networking basics

Tools

Splunk

QRadar

LogRhythm

Microsoft Sentinel

Elastic

Jobbeschreibung

Piper Companies is seeking an Insider Threat Security Engineer to join a leading technology organization. This role is a remote opportunity within the United States and sits on the CSIRT, tackling insider threats and security monitoring.

You will investigate incidents, lead threat hunts, and develop SIEM detections using Splunk, QRadar, or similar platforms, while applying UEBA/UBA tools to reduce enterprise risk.