Threat Detection Engineer - Splunk, UEBA & RBA

Piper Companies; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

PTO

Job summary

Piper Companies is seeking a Detection & Threat Engineer to join a leading cybersecurity-focused organization in the United States. The role focuses on building advanced threat detections, enhancing security monitoring, and increasing threat visibility across enterprise environments.

You will write SPL queries from scratch and apply RBA and UEBA techniques to detect evolving threats. You will partner with Threat Hunting, Incident Response, and SOC teams to implement MITRE ATT&CK-aligned use

Qualifications

• 4+ years of experience in detection/engineering or security operations.
• Advanced SPL query development from scratch in Splunk.
• Experience with Risk-Based Alerting (RBA) and UEBA in enterprise security.
• Experience developing detection logic and use cases within Splunk Enterprise Security.
• Familiarity with threat actor TTPs and MITRE ATT&CK framework.
• Experience supporting SOC, Incident Response, or Threat Hunting functions.

Responsibilities

• Develop and maintain advanced detection content in Splunk Enterprise Security and related security platforms.
• Write complex SPL queries from scratch to identify threats, suspicious behaviors, and emerging attack techniques.
• Design, implement, and optimize Risk-Based Alerting (RBA) methodologies to improve detection fidelity and reduce alert fatigue.
• Leverage UEBA capabilities to identify anomalous user and entity behavior across enterprise environments.
• Partner with Threat Hunting, Incident Response, and Security Operations teams to improve detection coverage and investigation workflows.
• Analyze attack patterns and adversary techniques to create proactive detection use cases aligned with the MITRE ATT&CK framework.
• Continuously tune and enhance alerting logic to improve operational efficiency and threat visibility.
• Support detection engineering initiatives for cloud, endpoint, identity, and network security technologies.

Skills

SPL queries

RBA

UEBA

Threat detection

Threat hunting

Security engineering

Analytical skills

Communication

Tools

Splunk Enterprise Security

MITRE ATT&CK

Job description

Piper Companies is seeking a Detection & Threat Engineer to join a leading cybersecurity-focused organization in the United States. The role focuses on building advanced threat detections, enhancing security monitoring, and increasing threat visibility across enterprise environments.

You will write SPL queries from scratch and apply RBA and UEBA techniques to detect evolving threats. You will partner with Threat Hunting, Incident Response, and SOC teams to implement MITRE ATT&CK-aligned use