Remote Threat Hunter & Incident Response Pro

Piper Companies; Denver (CO); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

Piper Companies seeks an Instant Response Threat Investigator for a remote role operating on MST business hours. The ideal candidate is a cybersecurity professional with rapid incident response, threat detection, security monitoring, and proactive threat analysis to strengthen the organization's security posture.

Responsibilities include proactive threat hunting, developing Splunk detections and UEBA workflows, and producing detailed investigative reports and recommendations to support security

Qualifications

• 8+ years of experience conducting digital threat investigations, insider threat analysis, and forensic investigations.
• Advanced hands-on experience with Splunk Enterprise Security, including writing complex SPL queries from scratch and developing production-ready detections.
• Strong experience with Risk-Based Alerting (RBA), User and Entity Behavior Analytics (UEBA), and security detection engineering methodologies.
• Proven ability to translate threat intelligence and MITRE ATT&CK techniques into operational detections, response workflows, and measurable security outcomes.

Responsibilities

• Conduct proactive threat hunting and investigations focused on insider threats, suspicious user behavior, and protection of critical intellectual property.
• Design, develop, test, deploy, and tune advanced Splunk detections, correlation searches, risk rules, and RBA workflows using SPL.
• Configure and optimize UEBA detections and behavioral analytics to identify high-risk activity across enterprise environments.
• Produce detailed investigative reports, technical documentation, and actionable recommendations to support security operations and risk mitigation.

Skills

Threat hunting

Incident response

Security monitoring

Threat analysis

MITRE ATT&CK

Tools

Splunk Enterprise Security

Splunk SPL

Job description

Piper Companies seeks an Instant Response Threat Investigator for a remote role operating on MST business hours. The ideal candidate is a cybersecurity professional with rapid incident response, threat detection, security monitoring, and proactive threat analysis to strengthen the organization's security posture.

Responsibilities include proactive threat hunting, developing Splunk detections and UEBA workflows, and producing detailed investigative reports and recommendations to support security