Remote Threat Hunter: Insider Threat & Splunk Detective

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

PTO and holidays

Remote work within US

Job summary

Piper Companies seeks a Threat Hunting Investigator to support a leading technology organization protecting critical IP. The role involves conducting technical investigations and engineering advanced detections across Splunk environments.

This is a long-term contract opportunity with remote work allowed within the United States. Responsibilities include threat hunting focused on insider threats, analyzing multi-source telemetry, and translating MITRE ATT&CK techniques into production-ready

Qualifications

• Bachelor’s degree in CS, IS, or related field.
• 8–10 years of insider threat and digital investigation experience.
• 5+ years of hands-on Splunk security detection engineering experience.
• Advanced experience with SPL, Splunk ES, RBA and UEBA.
• Experience with MITRE ATT&CK and multi-source telemetry.
• Experience with AWS CloudTrail, Defender, Code42 or Digital Guardian preferred.
• Strong investigative judgment and communication skills.

Responsibilities

• Conduct threat hunting and investigations focused on insider threats and IP theft.
• Analyze endpoint, identity, cloud, network, and behavioral telemetry.
• Build, deploy, and tune Splunk detections using SPL, ES, RBA, and UEBA.
• Translate threat research into production detection logic.
• Perform endpoint forensic analysis and produce investigative reports.
• Test and improve detection accuracy, coverage, and response workflows.

Skills

Insider threat investigations

Threat hunting

Endpoint forensics

Communication

Education

Bachelor’s degree in Computer Science, Information Systems, or related field

Tools

SPL

Splunk Enterprise Security

RBA

UEBA

MITRE ATT&CK

AWS CloudTrail

Microsoft Defender

Code42

Digital Guardian

Job description

Piper Companies seeks a Threat Hunting Investigator to support a leading technology organization protecting critical IP. The role involves conducting technical investigations and engineering advanced detections across Splunk environments.

This is a long-term contract opportunity with remote work allowed within the United States. Responsibilities include threat hunting focused on insider threats, analyzing multi-source telemetry, and translating MITRE ATT&CK techniques into production-ready