Remote Threat Hunter: Insider Risk & Detection Expert

Piper Companies; United States; Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K

Sick leave

Job summary

Piper Companies seeks a Threat Hunting Investigator for a long term remote consulting opportunity. You will identify insider risk activity, develop advanced detections, and protect critical IP through proactive investigations and threat analysis across enterprise environments.

The role requires 8+ years in cyber investigations or related fields, expertise in Splunk (SPL, Enterprise Security, and RBA), and strong endpoint/security telemetry knowledge.

Qualifications

• Bachelor's degree in a technical discipline.
• 8+ years in cyber investigations, insider threat analysis, incident response, threat hunting, or digital forensics.
• 5+ years developing and maintaining security detections within Splunk (SPL, Enterprise Security, and RBA).
• Experience creating production-ready detection logic and correlation searches.
• Strong knowledge of endpoint security, Microsoft Defender, Purview, cloud telemetry, and user behavior analytics.

Responsibilities

• Lead proactive threat hunting using endpoint, identity, cloud, and network telemetry.
• Design, build, and optimize detections, correlation searches, and alerting workflows in Splunk.
• Investigate IP protection concerns via log analysis, forensics, and analytics across data sources.
• Translate threat intel and findings into scalable detection content and playbooks.
• Collaborate with security teams to improve monitoring and reduce false positives.

Skills

Cyber investigations

Threat hunting

Incident response

Digital forensics

Security analytics

Education

Bachelor's degree in Computer Science/Cybersecurity/Information Systems

Tools

Splunk SPL

Splunk Enterprise Security

RBA (Risk-Based Alerting)

Microsoft Defender

Microsoft Purview

UEBA

Job description

Piper Companies seeks a Threat Hunting Investigator for a long term remote consulting opportunity. You will identify insider risk activity, develop advanced detections, and protect critical IP through proactive investigations and threat analysis across enterprise environments.

The role requires 8+ years in cyber investigations or related fields, expertise in Splunk (SPL, Enterprise Security, and RBA), and strong endpoint/security telemetry knowledge.