Remote Insider Threat Engineer | Incident Response

Piper Companies; United States; Remote; USD 120,000 - 160,000; Part time

Benefits offered by this job

Medical benefits

Dental benefits

PTO and holidays

Job summary

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. The role focuses on detection, investigation, and remediation of insider threats within the CSIRT ecosystem.

This is a long-term remote contract opportunity for candidates located in the United States. The engineer will drive proactive threat hunting, develop detections in Splunk, and lead incident response from containment to post-incident review, collaborating with cross-functional

Qualifications

• 8+ years of cybersecurity-related experience including security operations, incident response, threat hunting, or insider threat programs.
• Strong hands-on experience with Splunk or comparable SIEM platforms (e.g., Microsoft Sentinel, QRadar, LogRhythm, Elastic).
• Proven ability to write and modify advanced SPL searches and detection logic.
• Experience using UBA/UEBA to identify insider risk and anomalies.
• Solid networking knowledge (TCP/IP, DNS, routing, switching, network security).
• Background in systems administration, network engineering, or infrastructure operations is highly valued.
• Demonstrated security investigations, threat hunting engagements, and incident response activities.

Responsibilities

• Investigate insider threat incidents as part of the CSIRT function.
• Conduct proactive threat hunting to uncover abnormal user behavior and risks.
• Lead response efforts from initial detection through containment, remediation and post-incident documentation.
• Develop, maintain, and optimize detections and dashboards using Splunk and other SIEMs.
• Utilize UBA/UEBA tech to identify insider risk across the environment.
• Collaborate with infrastructure, networking, and security teams to strengthen detection capabilities.
• Analyze logs, endpoint telemetry, and network data to support investigations and monitoring.

Skills

Splunk

SPL queries

Threat hunting

Incident response

CSIRT

UBA/UEBA

Network security basics

Security investigations

Tools

Splunk

Microsoft Sentinel

QRadar

LogRhythm

Elastic

Job description

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. The role focuses on detection, investigation, and remediation of insider threats within the CSIRT ecosystem.

This is a long-term remote contract opportunity for candidates located in the United States. The engineer will drive proactive threat hunting, develop detections in Splunk, and lead incident response from containment to post-incident review, collaborating with cross-functional