Remote Threat Investigator - Splunk & Incident Response

Piper Companies; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Dental insurance

Vision insurance

401(k)

PTO

Résumé du poste

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization focused on protecting enterprise environments from advanced threats. The role emphasizes CSIRT operations, threat detection, incident response, and user behavior analytics within Splunk ES and Splunk UEBA.

You will monitor, detect, investigate, and respond to security incidents, perform root-cause analysis, develop mitigation strategies, and collaborate with security teams.

Qualifications

• Must be eligible to obtain a Secret Clearance.
• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments.
• Hands-on Splunk Enterprise Security and/or Splunk UEBA experience.
• Strong understanding of security concepts and incident response processes.
• Experience investigating suspicious user activity and behavioral anomalies.
• Familiarity with log analysis and threat intelligence.

Responsabilités

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk Enterprise Security and Splunk UEBA to identify anomalous user behavior and potential threats.
• Conduct threat assessments, event monitoring, incident detection, and response activities.
• Perform in-depth investigations and root cause analysis of security events and alerts.
• Develop mitigation strategies and recommendations to reduce organizational security risk.
• Analyze user behavior trends and suspicious activity to support proactive threat hunting efforts.
• Collaborate with security operations, engineering, and leadership teams during incident response activities.
• Support vulnerability management initiatives and contribute to security architecture discussions.
• Document investigative findings and provide recommendations to stakeholders.

Connaissances

Threat Investigation

Incident Response

CSIRT operations

Security Monitoring

Analytical thinking

Outils

Splunk Enterprise Security

Splunk UEBA

SIEM

Description du poste

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization focused on protecting enterprise environments from advanced threats. The role emphasizes CSIRT operations, threat detection, incident response, and user behavior analytics within Splunk ES and Splunk UEBA.

You will monitor, detect, investigate, and respond to security incidents, perform root-cause analysis, develop mitigation strategies, and collaborate with security teams.