Remote Threat Investigator: CSIRT & Splunk Analytics

Piper Companies; États-Unis; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Dental insurance

Vision insurance

401(k)

PTO

Résumé du poste

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, incident response, and user behavior analytics, leveraging Splunk Enterprise Security and UEBA to safeguard enterprise environments.

Responsibilities include monitoring, investigating, and responding to incidents; performing root cause analyses; and collaborating across security teams to enhance defenses and risk

Qualifications

• Eligible to obtain a Secret Clearance.
• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments.
• Hands-on experience with Splunk Enterprise Security and/or Splunk UEBA.
• Knowledge of security frameworks, threat lifecycle concepts, and incident response processes.

Responsabilités

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk ES and Splunk UEBA to identify anomalous user behavior and threats.
• Conduct threat assessments, event monitoring, and incident response activities.
• Perform in-depth investigations and root cause analysis of security events and alerts.
• Develop mitigation strategies to reduce security risk.
• Collaborate with security ops, engineering, and leadership during incident response.
• Document findings and provide recommendations to stakeholders.

Connaissances

Threat investigation

Incident response

SOC/CSIRT experience

Security analytics

Communication skills

Outils

Splunk Enterprise Security

Splunk UEBA

Description du poste

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, incident response, and user behavior analytics, leveraging Splunk Enterprise Security and UEBA to safeguard enterprise environments.

Responsibilities include monitoring, investigating, and responding to incidents; performing root cause analyses; and collaborating across security teams to enhance defenses and risk