Remote Threat Hunter & Insider Risk Investigator

ZP Group; United States; Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K

Sick leave

Job summary

Piper Companies is seeking a Threat Hunting Investigator to join a leading technology and cybersecurity organization for a long term remote consulting opportunity. The role focuses on insider risk, advanced detections, and threat analysis across enterprise environments.

The ideal candidate has 8+ years in cyber investigations and 5+ years building detections in Splunk, with strong knowledge of Defender, Purview, and MITRE ATT&CK.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline.
• 8+ years of experience in cyber investigations, insider threat analysis, incident response, threat hunting, or digital forensics.
• 5+ years of hands-on experience developing and maintaining security detections within Splunk (Splunk Enterprise Security, SPL, and RBA).
• Experience creating production-ready detection logic, correlation searches, and measurable security use cases.

Responsibilities

• Lead proactive threat hunting using endpoint, identity, cloud, and network telemetry to identify insider risk activity.
• Design, build, and optimize detections, correlation searches, and alerting workflows within Splunk ES and related security platforms.
• Investigate intellectual property protection concerns through log analysis, digital forensics, and behavioral analytics across data sources.
• Translate threat intelligence and investigations into scalable detection content, response procedures, and playbooks.
• Collaborate with cross-functional security teams to improve monitoring and reduce false positives.

Skills

Threat hunting

Incident response

Splunk SPL

Threat detection

Endpoint security

Security monitoring

MITRE ATT&CK

Digital forensics

Log analysis

Cloud telemetry

Education

Bachelor's degree

Tools

Splunk Enterprise Security

SPL development

Risk-Based Alerting (RBA)

Microsoft Defender

Microsoft Purview

UEBA

Cisco networking

Job description

Piper Companies is seeking a Threat Hunting Investigator to join a leading technology and cybersecurity organization for a long term remote consulting opportunity. The role focuses on insider risk, advanced detections, and threat analysis across enterprise environments.

The ideal candidate has 8+ years in cyber investigations and 5+ years building detections in Splunk, with strong knowledge of Defender, Purview, and MITRE ATT&CK.