Threat Investigator - 175219 - 175680

Piper Companies; North Carolina; Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Vision, Dental benefits

PTO & Paid Holidays

Hybrid work flexibility

Job summary

Piper Companies is seeking a Threat Investigator to join a growing cybersecurity client in the Raleigh-Durham area. The role requires working in a hybrid environment with onsite and remote responsibilities and focuses on investigating threats, analyzing incidents, and proactively identifying malicious activity across enterprise environments.

The ideal candidate has 4+ years of cyber threat experience, hands-on analysis of logs and telemetry, familiarity with MITRE ATT&CK, SIEM/EDR, and strong

Qualifications

• 4+ years of experience in cyber threat investigation, incident response, or security operations.
• Hands-on analysis of logs, alerts, endpoint telemetry, and network traffic.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and MITRE ATT&CK.
• Experience with SIEM, EDR, and threat intelligence platforms.

Responsibilities

• Perform in-depth investigations of security alerts, incidents, and anomalous activity to determine scope, impact, and root cause.
• Monitor threat intelligence feeds and leverage internal security tools to identify emerging risks and indicators of compromise.
• Conduct threat hunting across networks, endpoints, and cloud environments to uncover malicious behavior and security gaps.
• Collaborate with incident response, security operations, and infrastructure teams to contain, remediate, and prevent future security incidents.
• Develop detailed investigative reports and communicate findings, trends, and recommendations to technical and non-technical stakeholders.

Skills

Threat investigation

Incident response

Threat hunting

Security operations

Tools

SIEM

EDR

Threat intel platforms

Job description

Piper Companies is seeking a Threat Investigator to join a growing client in the cybersecurity industry in the Raleigh-Durham (RTP), NC area. The Threat Investigator role requires working in a hybrid environment with a combination of onsite and remote responsibilities. The Threat Investigator role is ideal for a cybersecurity professional with experience investigating threats, analyzing security incidents, and proactively identifying malicious activity across enterprise environments.

Responsibilities of the Threat Investigator include:

• Perform in-depth investigations of security alerts, incidents, and anomalous activity to determine the scope, impact, and root cause of potential threats.
• Monitor threat intelligence feeds and leverage internal security tools to identify emerging risks and indicators of compromise.
• Conduct threat hunting activities across networks, endpoints, and cloud environments to uncover malicious behavior and security gaps.
• Collaborate with incident response, security operations, and infrastructure teams to contain, remediate, and prevent future security incidents.
• Develop detailed investigative reports and communicate findings, trends, and recommendations to technical and non-technical stakeholders.

Requirements of the Threat Investigator include:

• 4+ years of experience in cyber threat investigation, incident response, threat hunting, or security operations.
• Hands-on experience analyzing logs, alerts, endpoint telemetry, network traffic, and other security data sources.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Strong analytical, communication, and problem-solving skills with the ability to operate in a fast-paced security environment.

Compensation for the Threat Investigator include:

• $120,000 - $150,000 annually
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
• Hybrid work flexibility.
• This job opens for applications on 10/9/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Threat Investigator, Cyber Threat Investigator, Threat Hunting, Incident Response, SOC Analyst, Cybersecurity Analyst, Security Operations, Threat Intelligence, SIEM, EDR, MITRE ATT&CK, Hybrid, RTP, Raleigh, Durham, NC

#LI-BM4

#LI-HYBRID