Threat Detection Engineer — Splunk, RBA & UEBA

Piper Companies; United States; À distance; USD 130 000 - 160 000; Plein temps

Avantages offerts par ce poste

Medical

Dental

Vision

401(k)

PTO

Résumé du poste

Piper Companies seeks a Detection & Threat Engineer in the United States to build advanced threat detections and enhance security monitoring across enterprise environments. The role focuses on writing SPL queries from scratch and implementing Risk-Based Alerting (RBA) and UEBA to improve threat visibility.

You will partner with Threat Hunting, Incident Response, and SOC teams to create proactive detection use cases, tune alerts, and support cloud, endpoint, identity, and network security

Qualifications

• 4+ years in Detection Engineering, Threat Detection, Threat Hunting, or Security Engineering.
• Advanced experience writing SPL queries from scratch in Splunk.
• Strong hands-on experience with Risk-Based Alerting (RBA) and UEBA.
• Experience developing detection logic and security use cases within Splunk Enterprise Security.
• Knowledge of threat actor TTPs and the MITRE ATT&CK framework.
• Experience supporting SOC, Incident Response, or Threat Hunting functions.
• Familiarity with cloud security, endpoint security, and identity security monitoring.
• Excellent analytical, troubleshooting, and communication skills.

Responsabilités

• Develop and maintain advanced detection content within Splunk Enterprise Security and related security platforms.
• Write complex SPL queries from scratch to identify threats, suspicious behaviors, and emerging attack techniques.
• Design, implement, and optimize Risk-Based Alerting (RBA) methodologies to improve detection fidelity and reduce alert fatigue.
• Leverage UEBA capabilities to identify anomalous user and entity behavior across enterprise environments.
• Partner with Threat Hunting, Incident Response, and Security Operations teams to improve detection coverage and investigation workflows.
• Analyze attack patterns and adversary techniques to create proactive detection use cases aligned with the MITRE framework.
• Continuously tune and enhance alerting logic to improve operational efficiency and threat visibility.
• Support detection engineering initiatives for cloud, endpoint, identity, and network security technologies.

Connaissances

SPL queries

Risk-Based Alerting

UEBA

Splunk Enterprise Security

Threat detection

Threat hunting

SOC/IR experience

MITRE ATT&CK

Outils

Splunk Enterprise Security

SPL

Description du poste

Piper Companies seeks a Detection & Threat Engineer in the United States to build advanced threat detections and enhance security monitoring across enterprise environments. The role focuses on writing SPL queries from scratch and implementing Risk-Based Alerting (RBA) and UEBA to improve threat visibility.

You will partner with Threat Hunting, Incident Response, and SOC teams to create proactive detection use cases, tune alerts, and support cloud, endpoint, identity, and network security