Threat Hunter

Piper Companies; Morrisville (NC); Remote; USD 100,000 - 135,000; Full time

Job summary

A global technology firm located in Morrisville, NC is seeking a Threat Hunter. This role involves developing SPL queries and conducting proactive threat hunts. The ideal candidate has over 3 years of experience in cybersecurity, with strong skills in Splunk. This is a long-term contract position that allows for remote work and offers comprehensive benefits. Salary ranges from $100,000 to $135,000.

Benefits

Health insurance

Vision and dental coverage

PTO and paid holidays

Sick leave as required by law

Qualifications

• 3+ years in cybersecurity focused on threat hunting or incident response.
• Strong expertise in Splunk SPL and threat detection.
• Experience with network monitoring tools.

Responsibilities

• Develop SPL queries to detect IOCs, anomalies, and threats.
• Conduct proactive threat hunts across diverse environments.
• Collaborate with teams to improve detection.

Skills

Cybersecurity experience

Splunk SPL expertise

Knowledge of EDR tools

Cloud security familiarity

Tools

CrowdStrike

SentinelOne

SIEM

Job description

Overview

Piper Companies is hiring a Threat Hunter for a world wide technology company located in Morrisville, NC. The Threat Hunter proactively identifies and mitigates threats using advanced SPL queries in Splunk across endpoints, networks, and cloud environments. The role is a long term contract opportunity with potential to convert to permanent and can be remote in Morrisville, NC.

Responsibilities

• Develop SPL queries to detect IOCs, anomalies, and threats
• Conduct proactive threat hunts across diverse environments
• Collaborate with SOC, IR, and engineering teams to improve detection
• Integrate threat intel and MITRE ATT&CK techniques into hunting strategies

Qualifications

• 3+ years in cybersecurity, focused on threat hunting or incident response
• Strong expertise in Splunk SPL and threat detection
• Experience with EDR tools (e.g., CrowdStrike, SentinelOne), SIEMs, and network monitoring
• Familiarity with cloud security and authentication protocols (SAML, OAuth)

Compensation

• $100,000-$135,000
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law

Keywords

Keywords: Threat Hunter, cybersecurity, SPL, Splunk, threat detection, incident response, IOCs, MITRE ATT&CK, EDR, CrowdStrike, SentinelOne, SIEM, network monitoring, cloud security, proactive defense, data analytics, log analysis, playbook development, SOC, hybrid role, Piper Companies, security operations, authentication protocols, SAML, OAuth, threat intelligence

This job opens for applications on 10/10/2025. Applications for this job will be accepted for at least 30 days from the posting date.