Remote Insider Threat Hunter & Forensic Investigator

Piper Companies; United States; Remote; USD 140,000 - 170,000; Full time

Job summary

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting operations, and critical intellectual property protection initiatives. This full-time contract opportunity is remote within the US and requires the ability to hold a clearance.

You will work with Security & Trust, Global Security & Executive Protection, and Incident Detection & Response teams to identify, investigate, and mitigate risks posed by malicious, negligent, or

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field required.
• 8+ years of experience conducting insider threat investigations, evaluating risks, and implementing security countermeasures.
• 8+ years of experience performing digital forensic investigations, data triage, and endpoint analysis.
• 5+ years of hands-on experience engineering and operating Splunk security detections, including Splunk Enterprise Security and Risk-Based Alerting (RBA).
• Strong expertise developing production-grade detection content utilizing advanced SPL, correlation searches, risk rules, notable events, and adaptive response actions.
• Experience with Splunk UEBA or comparable behavioral analytics platforms, including anomaly detection, risk scoring, and user/entity behavior analysis.
• Experience analyzing AWS CloudTrail, endpoint, identity, network, SaaS, and insider-risk telemetry data is highly preferred.
• Experience with security tools such as Code42, Microsoft Defender, Digital Guardian, or similar insider-risk monitoring platforms is a plus.

Responsibilities

• Conduct proactive threat hunting activities focused on insider threats, intellectual property theft, and emerging security risks.
• Analyze logs, telemetry, behavioral indicators, and endpoint data to identify suspicious activity and potential threat actors.
• Perform digital investigations, forensic analysis, and data triage to support incident response and risk mitigation efforts.
• Develop and present clear investigative findings, technical reports, and recommendations to stakeholders.
• Design, develop, test, deploy, and maintain advanced threat detections within Splunk Enterprise Security, Risk-Based Alerting (RBA), and UEBA environments.
• Translate threat intelligence, MITRE ATT&CK techniques, and investigative findings into scalable detection logic and response workflows.
• Validate and tune detection content through testing, false-positive analysis, telemetry reviews, and continuous improvement initiatives.

Skills

Threat hunting

Insider threat investigations

Detection engineering

Detection tuning

Endpoint telemetry

Python scripting

C++

MITRE ATT&CK

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related technical field

Tools

Splunk Enterprise Security

Risk-Based Alerting (RBA)

Splunk UEBA

Splunk SIEM

Splunk SPL

AWS CloudTrail

Code42

Microsoft Defender

Digital Guardian

Job description

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting operations, and critical intellectual property protection initiatives. This full-time contract opportunity is remote within the US and requires the ability to hold a clearance.

You will work with Security & Trust, Global Security & Executive Protection, and Incident Detection & Response teams to identify, investigate, and mitigate risks posed by malicious, negligent, or