Remote Threat Hunter & Incident Response Investigator

Piper Companies; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k)

Job summary

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity and incident response organization. You will monitor, detect, investigate, and respond to security incidents across enterprise environments, leveraging Splunk Enterprise Security and Splunk UEBA to identify threats and anomalous user behavior.

Ideal candidates have CSIRT/SOC experience, strong threat detection skills, and the ability to work remotely with distributed security teams.

Qualifications

• Experience in Threat Investigation, Incident Response, SOC/CSIRT environments.
• Hands-on with Splunk Enterprise Security and Splunk UEBA.
• Strong understanding of threat detection methodologies and incident response processes.

Responsibilities

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk ES/UEBA to identify anomalous user behavior and potential threats.
• Conduct threat assessments, event monitoring, incident detection, and response activities.
• Perform in-depth investigations and root cause analysis of security events and alerts.
• Develop mitigation strategies to reduce security risk.
• Analyze user behavior trends to support proactive threat hunting.
• Collaborate with security operations and leadership during incident response.
• Support vulnerability management and security architecture discussions.
• Document findings and provide recommendations to stakeholders.

Skills

Threat investigation

Incident response

SOC/CSIRT

Security monitoring

Log analysis

Threat intelligence

Communication

Analytical thinking

Remote collaboration

Tools

Splunk Enterprise Security

Splunk UEBA

Job description

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity and incident response organization. You will monitor, detect, investigate, and respond to security incidents across enterprise environments, leveraging Splunk Enterprise Security and Splunk UEBA to identify threats and anomalous user behavior.

Ideal candidates have CSIRT/SOC experience, strong threat detection skills, and the ability to work remotely with distributed security teams.