Threat Hunter Investigator

Job Summary

Seeking a senior cybersecurity professional, the Threat Hunter Investigator will work remotely during EST business hours, focusing on proactive threat hunting, insider threat investigations, and advanced Splunk detection engineering.

Key responsibilities:

• Conduct proactive threat hunting and investigations centered on insider threats and suspicious user activity
• Develop, test, deploy, and tune advanced Splunk detection content and correlation searches
• Produce clear investigative reports and actionable recommendations for security stakeholders

Required qualifications:

• 8+ years of experience in digital threat investigations and insider threat analysis
• Advanced hands-on experience with Splunk Enterprise Security and complex SPL queries
• Strong experience in developing Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA) programs
• Proven ability to translate threat intelligence into production-ready detections and workflows