Threat Hunter Investigator - 177302

Piper Companies; North Carolina; Híbrido; USD 140.000 - 165.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Paid holidays

Additional leave

Descripción de la vacante

Piper Companies is seeking a Threat Hunter Investigator to join a leading technology organization based in Raleigh, NC. This fully remote role operates on EST hours and focuses on proactively identifying, investigating, and mitigating insider threats to protect critical IP and data.

The ideal candidate will have 8+ years in cyber investigations, strong Splunk ES experience, and advanced SPL skills to develop detections, RBA/UEBA models, and robust incident response workflows.

Formación

• Bachelor's degree in cybersecurity, CS, info systems, or related field.
• 8+ years in cyber investigations, insider threat, and digital forensics.
• Strong hands-on Splunk Enterprise Security experience and threat detection.
• Expertise in writing SPL queries and custom detections.
• Experience with risk scoring, anomaly detection, and UEBA.

Responsabilidades

• Conduct proactive threat hunting and insider threat investigations using logs and behavior analytics.
• Investigate IP theft, data loss, and insider risk events with documented findings.
• Develop and tune detections within Splunk Enterprise Security (SPL).
• Build Risk-Based Alerting use cases and automated responses.
• Configure UEBA models across endpoints, cloud, network, and apps.
• Create runbooks and detection content, improving alert quality and MITRE ATT&CK alignment.

Conocimientos

Splunk Enterprise Security

SPL queries

Threat hunting

UEBA

RBA

Digital forensics

Insider threat investigations

Cybersecurity fundamentals

Educación

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field

Herramientas

Splunk Enterprise Security

Descripción del empleo

Piper Companies is seeking a Threat Hunter Investigator to join a leading technology organization based in Raleigh, NC. This individual will be responsible for proactively identifying, investigating, and mitigating insider threats, whether malicious, negligent, or the result of a compromised account. The role will support investigations involving the protection of critical intellectual property and sensitive company data. This is a fully remote opportunity working EST hours.

Responsibilities of the Threat Hunter Investigator:

• Conduct proactive threat hunting and insider threat investigations leveraging logs, endpoint data, user activity, and behavioral analytics.
• Investigate potential intellectual property theft, data loss, and other insider risk events, documenting findings and recommendations.
• Develop and tune advanced threat detections within Splunk Enterprise Security using SPL.
• Build and maintain Risk-Based Alerting (RBA) use cases, correlation searches, and automated response workflows.
• Configure and optimize UEBA models and behavioral detections across endpoint, cloud, network, and application environments.
• Create technical documentation, runbooks, and detection content while continuously improving alert quality and coverage aligned to MITRE ATT&CK.

Qualifications of the Threat Hunter Investigator:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• 8+ years of experience conducting cyber investigations, insider threat analysis, and digital forensic investigations.
• Strong hands-on experience with Splunk Enterprise Security, including detection engineering and threat hunting.
• Advanced experience writing SPL queries and developing custom detections and correlation searches.
• Experience with RBA and UEBA, including risk scoring, anomaly detection, and behavioral analytics.
• Strong understanding of threat hunting methodologies and translating threat intelligence into actionable detections.

Compensation & Benefits:

• Base salary ranging from $140,000 - $165,000
• Comprehensive benefits package including Medical, Dental, Vision, 401(k), PTO, paid holidays, and additional leave offerings where applicable

Keywords: Threat Hunting, Insider Threat, Incident Response, Splunk Enterprise Security, SPL, Detection Engineering, UEBA, RBA, Digital Forensics, Cybersecurity

#LI-REMOTE #LI-KI1