Threat Detection Engineer

Job Summary

Seeking an experienced cybersecurity professional, the full-time remote Threat Detection Engineer will focus on proactive threat hunting, incident investigation, and developing advanced Splunk detections to enhance the organization's security posture during PST business hours.

Key responsibilities:

• Conduct proactive threat hunting and investigations related to insider threats and suspicious user behavior
• Design, develop, test, and tune advanced Splunk detections and correlation searches
• Produce detailed investigative reports and actionable recommendations to support security operations

Required qualifications:

• 8+ years of experience in digital threat investigations and forensic analysis
• Advanced hands-on experience with Splunk Enterprise Security and writing complex SPL queries
• Strong knowledge of Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)
• Proven ability to translate threat intelligence into operational detections and response workflows