Threat Hunter Investigator

Job Summary

Working remotely on EST hours, the Threat Hunter Investigator will identify, investigate, and mitigate risks posed by internal actors while conducting research and producing investigative reports related to the protection of critical intellectual property.

Key responsibilities:

• Conduct proactive threat hunting and insider risk investigations using logs, endpoint telemetry, and behavioral indicators
• Research, analyze, and mitigate threats involving sensitive data exposure and intellectual property theft while producing clear investigative reports
• Design and optimize advanced threat detections using Splunk SPL and maintain Risk-Based Alerting workflows within Splunk Enterprise Security

Required qualifications:

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field
• 8+ years of experience in threat investigations, insider threat analysis, and digital forensics
• Strong hands-on experience with Splunk Enterprise Security, including engineering and tuning security detections
• Proven ability to write advanced SPL queries and develop correlation searches and custom detections
• Deep experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)