Remote Threat Hunter - Insider Risk & Detections

Piper Companies; United States; Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401K

Job summary

Piper Companies is seeking a Threat Hunting Investigator for a long-term remote consulting engagement with a leading technology and cybersecurity organization. You will identify insider risk activity, develop advanced detections, and protect intellectual property through proactive investigations.

The role requires hands-on experience with Splunk, MITRE ATT&CK mappings, and enterprise security telemetry across endpoints, identity, cloud, and network layers.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field.
• 8+ years of cyber investigations, insider threat analysis, IR, threat hunting, or digital forensics.
• 5+ years developing and maintaining detections in Splunk, including SPL, Enterprise Security, and RBA.
• Experience creating production-ready detection logic, correlation searches, and behavioral analytics.
• Strong understanding of endpoint security, Defender, Purview, cloud telemetry, and UEBA platforms.
• Working knowledge of Cisco technologies and enterprise networking related to security monitoring.

Responsibilities

• Lead proactive threat hunting across endpoint, identity, cloud, and network telemetry to identify insider risk activity.
• Design, build, and optimize advanced detections, correlation searches, and risk-based alerting workflows within Splunk Enterprise Security.
• Investigate intellectual property protection concerns via log analysis, forensics, and behavioral analytics across data sources.
• Translate threat intelligence and MITRE ATT&CK techniques into scalable detection content, playbooks, and response procedures.
• Collaborate with cross-functional security teams to improve monitoring, reduce false positives, and strengthen detection coverage.

Skills

Threat hunting

Insider threat analysis

Incident response

Digital forensics

SPL development

Splunk SPL

Risk-Based Alerting

UEBA

MITRE ATT&CK

Endpoint security

Microsoft Defender

Microsoft Purview

Cisco technologies

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Splunk Enterprise Security

Microsoft Defender

Microsoft Purview

Cisco networking

Job description

Piper Companies is seeking a Threat Hunting Investigator for a long-term remote consulting engagement with a leading technology and cybersecurity organization. You will identify insider risk activity, develop advanced detections, and protect intellectual property through proactive investigations.

The role requires hands-on experience with Splunk, MITRE ATT&CK mappings, and enterprise security telemetry across endpoints, identity, cloud, and network layers.