Threat Investigator

Piper Companies; Durham (NC); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity organization in a hybrid capacity in Durham, NC. The role focuses on identifying, analyzing, and responding to advanced cyber threats to safeguard enterprise systems, networks, and data.

Responsibilities include proactive threat hunting, investigating security alerts and incidents, analyzing threat intelligence and MITRE ATT&CK techniques, and collaborating with incident response, SOC, and engineering teams to

Qualifications

• 4+ years of experience in cyber threat investigation, threat hunting, incident response, or security operations.
• Experience with SIEM platforms such as Splunk, Sentinel, QRadar, or similar technologies.
• Strong understanding of threat intelligence frameworks (MITRE ATT&CK).
• Hands-on experience with EDR and security monitoring tools.
• Proficiency analyzing Windows, Linux, cloud, and network security events.
• Familiarity with malware analysis and digital forensics.
• Strong analytical, communication, and documentation skills.
• Certifications like GCIH, GCFA, GCIA, CISSP, Security+ or equivalent preferred.
• Bachelor's degree in Cybersecurity/CS/IT or related field preferred.

Responsibilities

• Conduct proactive threat hunting across enterprise environments to identify indicators of compromise and malicious behavior.
• Investigate security alerts, incidents, and anomalies to determine scope, impact, and root cause.
• Analyze threat intelligence, attacker TTPs, and emerging cyber risks.
• Correlate data from SIEM, EDR, IDS/IPS, and network monitoring platforms.
• Develop and document investigative findings, response actions, and recommendations for security improvements.
• Collaborate with incident response, SOC, engineering, and infrastructure teams to remediate identified threats.
• Create and maintain threat detection logic, use cases, and investigative playbooks.
• Support digital forensic investigations and evidence collection efforts when necessary.

Skills

Threat investigation

Threat hunting

Incident response

Security operations

MITRE ATT&CK

Analytical skills

Documentation

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

GCIH/GCFA/GCIA/CISSP/Security+ or equivalent certifications

Tools

SIEM: Splunk

SIEM: Microsoft Sentinel

SIEM: IBM QRadar

EDR tools

Network monitoring

Job description

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity organization in a hybrid capacity in Durham, NC. The Threat Investigator will play a critical role in identifying, analyzing, and responding to advanced cyber threats while helping to safeguard enterprise systems, networks, and sensitive data from evolving security risks.

Responsibilities of the Threat Investigator:

• Conduct proactive threat hunting activities across enterprise environments to identify indicators of compromise and malicious behavior.
• Investigate security alerts, incidents, and anomalies to determine scope, impact, and root cause.
• Analyze threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cyber risks.
• Correlate data from security tools including SIEM, EDR, IDS/IPS, and network monitoring platforms.
• Develop and document investigative findings, response actions, and recommendations for security improvements.
• Collaborate with incident response, SOC, engineering, and infrastructure teams to remediate identified threats.
• Create and maintain threat detection logic, use cases, and investigative playbooks.
• Support digital forensic investigations and evidence collection efforts when necessary.

Qualifications of the Threat Investigator:

• 4+ years of experience in cyber threat investigation, threat hunting, incident response, or security operations.
• Experience utilizing SIEM platforms such as Splunk, Sentinel, QRadar, or similar technologies.
• Strong understanding of threat intelligence frameworks, including MITRE ATT&CK.
• Hands‑on experience with endpoint detection and response (EDR) tools and security monitoring technologies.
• Proficiency analyzing Windows, Linux, cloud, and network security events.
• Familiarity with malware analysis principles and digital forensics methodologies.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, Security+, or comparable certifications are preferred.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred.

Compensation for the Threat Investigator includes:

• Salary range: $120,000 - $150,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, and prescription coverage

This job opens for applications on 09/24/2026. Applications for this job will be accepted for at least 30 days from the posting date.