Remote Threat Investigator | CSIRT & Splunk Expert

Piper Companies; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Job summary

Piper Companies seeks a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, incident response, and user behavior analytics within Splunk ES and UEBA environments.

Responsibilities include monitoring and responding to incidents, conducting investigations, and developing mitigation strategies. Strong analytical and communication skills are essential for working with distributed security teams.

Qualifications

• Eligible to obtain a Secret Clearance.
• Experience in Threat Investigation, Incident Response, SOC, or CSIRT.
• Hands-on Splunk Enterprise Security and/or Splunk UEBA experience.
• Strong enterprise security, threat detection and incident response knowledge.
• Experience investigating suspicious activity and behavioral anomalies.
• Familiar with security monitoring, log analysis and threat intel.
• Knowledge of security frameworks and cyber threat lifecycle concepts.
• Excellent analytical, troubleshooting and communication skills.
• Ability to work remotely with distributed security teams.

Responsibilities

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk ES and Splunk UEBA to identify anomalous user behavior and threats.
• Conduct threat assessments, event monitoring, and incident response activities.
• Perform in-depth investigations and root cause analysis of security events.
• Develop mitigation strategies to reduce security risk.
• Analyze user behavior trends to support threat hunting.
• Collaborate with security operations, engineering and leadership during incident response.
• Support vulnerability management and contribute to security architecture discussions.
• Document findings and provide recommendations to stakeholders.

Skills

Threat detection

Incident response

CSIRT operations

Security analytics

Tools

Splunk Enterprise Security

Splunk UEBA

SIEM

Job description

Piper Companies seeks a Threat Investigator to support a leading cybersecurity and incident response organization. The role focuses on CSIRT operations, threat detection, incident response, and user behavior analytics within Splunk ES and UEBA environments.

Responsibilities include monitoring and responding to incidents, conducting investigations, and developing mitigation strategies. Strong analytical and communication skills are essential for working with distributed security teams.