Threat Investigator - 175219 - 175680 - 176209

Piper Companies; North Carolina; Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Vision

Dental

PTO

Paid holidays

Sick leave

Job summary

Piper Companies is seeking a Threat Investigator to join a growing client in the cybersecurity industry in the Raleigh-Durham (RTP), NC area. The role requires a hybrid work arrangement with onsite and remote responsibilities.

Ideal candidates will have 4+ years in threat investigation, incident response, threat hunting, or security operations, with hands-on analysis of logs, endpoints, and network data and familiarity with MITRE ATT&CK, SIEM, and EDR tools.

Qualifications

• 4+ years of experience in cyber threat investigation, incident response, threat hunting, or security operations.
• Hands-on experience analyzing logs, alerts, endpoint telemetry, network traffic, and other security data sources.
• Knowledge of threat actor TTPs and frameworks such as MITRE ATT&CK.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Strong analytical, communication, and problem-solving skills in a fast-paced security environment.

Responsibilities

• Perform in-depth investigations of security alerts, incidents, and anomalous activity to determine scope, impact, and root cause of potential threats.
• Monitor threat intelligence feeds and internal security tools to identify emerging risks and indicators of compromise.
• Conduct threat hunting across networks, endpoints, and cloud environments to uncover malicious behavior and gaps.
• Collaborate with incident response, security operations, and infrastructure teams to contain, remediate, and prevent future incidents.
• Develop detailed investigative reports and communicate findings and recommendations to technical and non-technical stakeholders.

Skills

Cyber threat investigation

Incident response

Threat hunting

Security operations

Log analysis

MITRE ATT&CK

SIEM

EDR

Tools

SIEM tools

EDR tools

Threat intelligence platforms

Job description

Piper Companies is seeking a Threat Investigator to join a growing client in the cybersecurity industry in the Raleigh-Durham (RTP), NC area. The Threat Investigator role requires working in a hybrid environment with a combination of onsite and remote responsibilities. The Threat Investigator role is ideal for a cybersecurity professional with experience investigating threats, analyzing security incidents, and proactively identifying malicious activity across enterprise environments.

Responsibilities of the Threat Investigator include:

• Perform in-depth investigations of security alerts, incidents, and anomalous activity to determine the scope, impact, and root cause of potential threats.
• Monitor threat intelligence feeds and leverage internal security tools to identify emerging risks and indicators of compromise.
• Conduct threat hunting activities across networks, endpoints, and cloud environments to uncover malicious behavior and security gaps.
• Collaborate with incident response, security operations, and infrastructure teams to contain, remediate, and prevent future security incidents.
• Develop detailed investigative reports and communicate findings, trends, and recommendations to technical and non-technical stakeholders.

Requirements of the Threat Investigator include:

• 4+ years of experience in cyber threat investigation, incident response, threat hunting, or security operations.
• Hands-on experience analyzing logs, alerts, endpoint telemetry, network traffic, and other security data sources.
• Knowledge of threat actor tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Strong analytical, communication, and problem-solving skills with the ability to operate in a fast-paced security environment.

Compensation for the Threat Investigator include:

• $120,000 - $150,000 annually
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
• Hybrid work flexibility.

This job opens for applications on 10/16/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Threat Investigator, Cyber Threat Investigator, Threat Hunting, Incident Response, SOC Analyst, Cybersecurity Analyst, Security Operations, Threat Intelligence, SIEM, EDR, MITRE ATT&CK, Hybrid, RTP, Raleigh, Durham, NC

#LI-BM4

#LI-HYBRID