Remote Threat Hunter – Splunk & Insider Threat Expert

Piper Companies; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, Vision, Dental

PTO and Paid Holidays

Sick Leave (as required by law)

Job summary

Piper Companies is seeking a Threat Hunting Investigator to support a leading technology organization protecting critical IP from insider threats. The role involves conducting technical investigations and engineering detections across Splunk environments.

The position is a long-term contract with remote work within the United States. Requirements include a bachelor's degree and 8–10 years of insider threat/endpoint forensic experience, plus 5+ years of hands-on Splunk security detection

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 8-10 years of insider threat, digital investigation, and endpoint forensic experience.
• 5+ years of hands-on Splunk security detection engineering experience.
• Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA.
• Experience with MITRE ATT&CK and multi-source security telemetry.
• Experience with AWS CloudTrail, Microsoft Defender, Code42, or Digital Guardian preferred.
• Strong investigative judgment and communication skills.

Responsibilities

• Conduct threat hunting and investigations focused on insider threats and critical IP theft.
• Analyze endpoint, identity, cloud, network, and behavioral telemetry.
• Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA.
• Translate threat research and MITRE ATT&CK techniques into production-ready detection logic.
• Perform endpoint forensic analysis and produce clear investigative reports.
• Test and continuously improve detection accuracy, coverage, and response workflows.

Skills

Splunk

Splunk Enterprise Security

SPL

RBA

UEBA

Threat hunting

Education

Bachelor's degree

Tools

AWS CloudTrail

Microsoft Defender

Code42

Digital Guardian

Job description

Piper Companies is seeking a Threat Hunting Investigator to support a leading technology organization protecting critical IP from insider threats. The role involves conducting technical investigations and engineering detections across Splunk environments.

The position is a long-term contract with remote work within the United States. Requirements include a bachelor's degree and 8–10 years of insider threat/endpoint forensic experience, plus 5+ years of hands-on Splunk security detection