Threat Detection Engineer

Job Summary

Working remotely during PST business hours, the Threat Detection Engineer will conduct proactive threat hunting, develop advanced Splunk detections, and produce detailed investigative reports to enhance the organization's cybersecurity posture.

Key responsibilities:

• Conduct proactive threat hunting and investigations focused on insider threats and suspicious user behavior
• Design, develop, test, deploy, and tune advanced Splunk detections and correlation searches
• Produce detailed investigative reports and actionable recommendations to support security operations

Required qualifications:

• 8+ years of experience in digital threat investigations and forensic investigations
• Advanced hands-on experience with Splunk Enterprise Security and complex SPL queries
• Strong experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)
• Proven ability to translate threat intelligence into operational detections and response workflows