Threat Hunter Investigator

Job Summary

Proactively identifying and mitigating insider threats, the fully remote Threat Hunter Investigator will conduct investigations into potential intellectual property theft and data loss while developing advanced threat detections using Splunk Enterprise Security.

Key responsibilities

• Conduct proactive threat hunting and insider threat investigations leveraging logs, endpoint data, and behavioral analytics
• Investigate insider risk events, documenting findings and recommendations for mitigation
• Develop and tune advanced threat detections and build Risk-Based Alerting use cases within Splunk Enterprise Security

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 8+ years of experience in cyber investigations and insider threat analysis
• Strong hands-on experience with Splunk Enterprise Security and threat hunting
• Advanced experience writing SPL queries and developing custom detections
• Understanding of threat hunting methodologies and translating threat intelligence into actionable detections