Remote Insider Threat Investigator & Detection Engineer

Piper Companies; United States; Remote; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Sick leave

Job summary

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting operations, and critical IP protection initiatives. This fully remote role within the United States requires ability to hold a security clearance and collaboration with Security & Trust, Incident Detection & Response teams.

Responsibilities include proactive threat hunts, log and endpoint analysis, digital forensics, and developing scalable detection content in Splunk ES, UEBA, and

Qualifications

• Bachelor's degree in a technical field required.
• 8+ years insider threat investigations experience.
• 8+ years digital forensics, data triage, and endpoint analysis.
• 5+ years engineering Splunk security detections (ES, RBA).
• Strong SPL and production-grade detection content development.
• Experience with UEBA or similar behavioral analytics.
• Experience with AWS CloudTrail and various telemetry data.
• Experience with insider-risk monitoring tools such as Code42, Defender, Digital Guardian.

Responsibilities

• Conduct proactive threat hunting focused on insider threats and IP theft.
• Analyze logs, telemetry, and endpoint data to identify suspicious activity.
• Perform digital investigations, forensic analysis, and data triage.
• Develop and present investigative findings and recommendations.
• Design and maintain detections within Splunk ES, UEBA, and RBA environments.
• Translate insights into scalable detection logic and workflows.
• Validate detections through testing and telemetry reviews.

Skills

Threat hunting

Digital forensics

Endpoint analysis

SPL development

Investigation reporting

Python

C++

Verilog

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field

Tools

Splunk ES

Risk-Based Alerting (RBA)

Splunk UEBA

AWS CloudTrail

Code42

Microsoft Defender

Digital Guardian

Job description

Piper Companies is seeking a Threat Hunting Investigator to support insider threat investigations, threat hunting operations, and critical IP protection initiatives. This fully remote role within the United States requires ability to hold a security clearance and collaboration with Security & Trust, Incident Detection & Response teams.

Responsibilities include proactive threat hunts, log and endpoint analysis, digital forensics, and developing scalable detection content in Splunk ES, UEBA, and