Remote Threat Hunter & Incident Response Specialist

Piper Companies; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k)

PTO

Job summary

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, and incident response within Splunk Enterprise Security and UEBA environments.

Responsibilities include monitoring and responding to incidents, root-cause analysis, and collaboration with distributed teams. Remote work is supported; a Secret Clearance is preferred. Salary ranges reflect experience in the United States.

Qualifications

• Eligible to obtain a Secret Clearance.
• Experience in Threat Investigation, Incident Response, SOC or CSIRT environments.
• Hands-on with Splunk Enterprise Security and/or Splunk UEBA.
• Strong understanding of enterprise security concepts, threat detection methodologies, and incident response processes.
• Experience investigating suspicious user activity, insider threat indicators, and behavioral anomalies.

Responsibilities

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk Enterprise Security and Splunk UEBA to identify anomalous user behavior and potential threats.
• Conduct threat assessments, event monitoring, incident detection, and response activities.
• Perform in-depth investigations and root cause analysis of security events and alerts.
• Develop mitigation strategies and recommendations to reduce organizational security risk.
• Analyze user behavior trends and suspicious activity to support proactive threat hunting efforts.
• Collaborate with security operations, engineering, and leadership teams during incident response activities.
• Support vulnerability management initiatives and contribute to security architecture discussions.
• Document investigative findings and provide recommendations to stakeholders.

Skills

Threat Investigation

Incident Response

SOC/CSIRT operations

Security Monitoring

Threat Detection

Log Analysis

Communication Skills

Remote Collaboration

Tools

Splunk Enterprise Security

Splunk UEBA

Job description

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, and incident response within Splunk Enterprise Security and UEBA environments.

Responsibilities include monitoring and responding to incidents, root-cause analysis, and collaboration with distributed teams. Remote work is supported; a Secret Clearance is preferred. Salary ranges reflect experience in the United States.