Threat Hunter Investigator

Job Summary

Seeking a seasoned cybersecurity professional, the full-time Threat Hunter Investigator will conduct proactive threat hunting and investigations focused on insider threats and suspicious user behavior, while working remotely during EST business hours.

Key responsibilities:

• Conduct proactive threat hunting and investigations targeting insider threats and suspicious user behavior
• Design, develop, and tune advanced Splunk detections and correlation searches using SPL
• Produce detailed investigative reports and actionable recommendations to support security operations

Required qualifications:

• 8+ years of experience in digital threat investigations and insider threat analysis
• Advanced hands-on experience with Splunk Enterprise Security and complex SPL query development
• Strong experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)
• Proven ability to translate threat intelligence into operational detections and response workflows