Threat Hunter Investigator

Job Summary

Proactively identifying and investigating insider threats, the fully remote Threat Hunter Investigator will mitigate risks to critical intellectual property and sensitive data while working during EST hours.

Key responsibilities:

• Conduct proactive threat hunting and insider threat investigations using logs, endpoint data, and behavioral analytics
• Investigate incidents of intellectual property theft and data loss, documenting findings and recommendations
• Develop and tune advanced threat detections within Splunk Enterprise Security and optimize UEBA models

Required qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 8+ years of experience in cyber investigations and insider threat analysis
• Strong hands-on experience with Splunk Enterprise Security and detection engineering
• Advanced proficiency in writing SPL queries and developing custom detections
• Experience with RBA and UEBA methodologies, including risk scoring and anomaly detection