Threat Detection Engineer - Splunk, UEBA & RBA

Piper Companies; EE. UU.; A distancia; USD 130.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical benefits

401(k) & PTO

Descripción de la vacante

Piper Companies is seeking a Detection & Threat Engineer to join a leading cybersecurity-focused organization. The Detection & Threat Engineer will play a key role in developing advanced threat detections, enhancing security monitoring capabilities, and improving threat visibility across enterprise environments.

This role requires strong experience writing SPL queries from scratch, with hands-on expertise in Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).

Formación

• 4+ years of experience in Detection Engineering, Threat Detection, Threat Hunting, or Security Engineering.
• Advanced experience writing SPL queries from scratch in Splunk.
• Strong hands-on experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).
• Experience developing detection logic and security use cases within Splunk Enterprise Security.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
• Experience supporting SOC, Incident Response, or Threat Hunting functions.
• Familiarity with cloud security, endpoint security, and identity security monitoring.
• Excellent analytical, troubleshooting, and communication skills.

Responsabilidades

• Develop and maintain advanced detection content within Splunk Enterprise Security and related security platforms.
• Write complex SPL queries from scratch to identify threats, suspicious behaviors, and emerging attack techniques.
• Design, implement, and optimize Risk-Based Alerting (RBA) methodologies to improve detection fidelity and reduce alert fatigue.
• Leverage UEBA capabilities to identify anomalous user and entity behavior across enterprise environments.
• Partner with Threat Hunting, Incident Response, and Security Operations teams to improve detection coverage and investigation workflows.
• Analyze attack patterns and adversary techniques to create proactive detection use cases aligned with the MITRE ATTACK framework.
• Continuously tune and enhance alerting logic to improve operational efficiency and threat visibility.
• Support detection engineering initiatives for cloud, endpoint, identity, and network security technologies.

Conocimientos

SPL queries

Threat detection

Threat hunting

MITRE ATT&CK

UEBA

Herramientas

Splunk Enterprise Security

Descripción del empleo

Piper Companies is seeking a Detection & Threat Engineer to join a leading cybersecurity-focused organization. The Detection & Threat Engineer will play a key role in developing advanced threat detections, enhancing security monitoring capabilities, and improving threat visibility across enterprise environments.

This role requires strong experience writing SPL queries from scratch, with hands-on expertise in Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA).