Threat Detection Engineer

Piper Companies; Portland (OR); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Medical benefits

PTO

Job summary

Piper Companies is seeking a Threat Detection Engineer for a leading technology organization in cybersecurity. This remote role operates on PST business hours and requires extensive experience in threat detection, incident response, and security monitoring.

The ideal candidate will design and tune Splunk detections, configure UEBA and RBA workflows, and produce detailed investigative reports to strengthen defense across enterprise environments.

Qualifications

• 8+ years of digital threat investigations and forensic experience.
• Experience with Splunk Enterprise Security and writing SPL queries.
• Knowledge of Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).

Responsibilities

• Proactive threat hunting and investigations focused on insider threats and high-risk activity.
• Design, test, deploy, and tune advanced Splunk detections, SPL searches, and RBA workflows.
• Configure UEBA detections and behavioral analytics across enterprise environments.
• Produce detailed investigative reports and actionable security recommendations.

Skills

Splunk ES

SPL queries

Threat hunting

UEBA

RBA

MITRE ATT&CK

Incident response

Tools

Splunk

SIEM tooling

Job description

Piper Companies is seeking a Threat Detection Engineer for a leading technology organization in the cybersecurity industry. The Threat Detection Engineer is a Remote position operating on PST business hours. An ideal candidate for the Threat Detection Engineer is an experienced cybersecurity professional with a strong background in rapid incident response, threat detection, security monitoring, incident investigation, and proactive threat analysis. The successful candidate will be skilled in leveraging security tools and data sources to quickly identify potential risks, investigate suspicious activity, and strengthen the organization’s overall security posture.

Responsibilities of the Threat Detection Engineer:

• Conduct proactive threat hunting and investigations focused on insider threats, suspicious user behavior, and protection of critical intellectual property.
• Design, develop, test, deploy, and tune advanced Splunk detections, correlation searches, risk rules, and RBA workflows using SPL.
• Configure and optimize UEBA detections and behavioral analytics to identify high-risk activity across enterprise environments.
• Produce detailed investigative reports, technical documentation, and actionable recommendations to support security operations and risk mitigation.

Qualifications of the Threat Detection Engineer:

• 8+ years of experience conducting digital threat investigations, insider threat analysis, and forensic investigations.
• Advanced hands-on experience with Splunk Enterprise Security, including writing complex SPL queries from scratch and developing production-ready detections.
• Strong experience with Risk-Based Alerting (RBA), User and Entity Behavior Analytics (UEBA), and security detection engineering methodologies.
• Proven ability to translate threat intelligence and MITRE ATT&CK techniques into operational detections, response workflows, and measurable security outcomes.

Compensation for the Threat Detection Engineer includes:

• Salary range:
• Comprehensive benefits package including medical, dental, vision, 401(k), sick leave as required by law, and PTO.

This job opens for applications on 10/16/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MM9

#LI-REMOTE