Remote Insider Threat Hunter & Detection Engineer

Piper Companies; USA; Remote; USD 140.000 - 170.000; Vollzeit

Benefits dieser Stelle

Medical

Dental

Vision

401(k)

Sick leave

Zusammenfassung

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting, and IP protection initiatives. This remote US-based role requires holding a security clearance and collaborating with Security & Trust, Global Security & Executive Protection, and Incident Detection & Response teams.

Responsibilities include proactive threat hunting, digital investigations, and developing scalable detections in Splunk ES/RBA/UEBA, with strong emphasis on MITRE

Qualifikationen

• Bachelor's degree in a technical field is required.
• 8+ years in insider threat investigations and security countermeasures.
• 8+ years in digital forensics, data triage, and endpoint analysis.
• 5+ years in engineering and operating Splunk detections (ES, RBA).
• Experience building production-grade detection content with SPL and correlations.
• Experience with UEBA or behavioral analytics platforms and anomaly/risk scoring.
• Experience analyzing AWS CloudTrail, endpoint, identity, network, SaaS telemetry is preferred.

Aufgaben

• Conduct proactive threat hunting focused on insider threats and IP theft.
• Analyze logs and endpoint data to identify suspicious activity and threat actors.
• Perform digital investigations and data triage to support incident response.
• Develop and present investigative findings, reports, and recommendations.
• Design, test, deploy, and maintain advanced threat detections in Splunk ES/RBA/UEBA.
• Translate MITRE ATT&CK techniques into scalable detection logic and workflows.
• Validate and tune detection content through testing and telemetry reviews.

Kenntnisse

Threat hunting

Insider threat investigations

Digital forensics

Incident response

Ausbildung

Bachelor's degree in Computer Science or related field

Tools

Splunk Enterprise Security

Risk-Based Alerting (RBA)

Splunk UEBA

Code42

Microsoft Defender

Digital Guardian

Jobbeschreibung

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting, and IP protection initiatives. This remote US-based role requires holding a security clearance and collaborating with Security & Trust, Global Security & Executive Protection, and Incident Detection & Response teams.

Responsibilities include proactive threat hunting, digital investigations, and developing scalable detections in Splunk ES/RBA/UEBA, with strong emphasis on MITRE