Remote Threat Hunter: Insider Threat & Splunk

Piper Companies; United States; Remote; USD 120,000 - 160,000; Part time

Benefits offered by this job

Full Comprehensive Benefits

Paid Holidays & Sick Leave

Job summary

Piper Companies seeks a Threat Hunting Investigator to support a leading technology organization protecting critical IP from insider threats. The Investigator will conduct technical investigations and engineer detections across Splunk environments, with remote work available in the United States.

You will analyze endpoint, cloud, identity, network, and behavioral telemetry; build and tune detections using Splunk ES, SPL, RBA, and UEBA; translate MITRE ATT&CK techniques into production-ready

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related field.
• 8-10 years of insider threat, digital investigation, and endpoint forensic experience.
• 5+ years of hands-on Splunk security detection engineering experience.
• Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA.
• Experience with MITRE ATT&CK and multi-source security telemetry.
• Experience with AWS CloudTrail, Microsoft Defender, Code42, or Digital Guardian preferred.
• Strong investigative judgment and communication skills.

Responsibilities

• Conduct threat hunting and investigations focused on insider threats and critical IP theft.
• Analyze endpoint, identity, cloud, network, and behavioral telemetry.
• Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA.
• Translate threat research and MITRE ATT&CK techniques into production-ready detection logic.
• Perform endpoint forensic analysis and produce clear investigative reports.
• Test and continuously improve detection accuracy, coverage, and response workflows.

Skills

Insider threat investigations

Endpoint forensic analysis

Splunk security detection engineering

SPL

MITRE ATT&CK

Security telemetry analysis

Communication skills

Education

Bachelor's degree in Computer Science

Tools

Splunk

Splunk Enterprise Security

RBA

UEBA

AWS CloudTrail

Microsoft Defender

Code42

Digital Guardian

Job description

Piper Companies seeks a Threat Hunting Investigator to support a leading technology organization protecting critical IP from insider threats. The Investigator will conduct technical investigations and engineer detections across Splunk environments, with remote work available in the United States.

You will analyze endpoint, cloud, identity, network, and behavioral telemetry; build and tune detections using Splunk ES, SPL, RBA, and UEBA; translate MITRE ATT&CK techniques into production-ready