Threat Hunter Investigator

Job Summary

Seeking a senior cybersecurity professional, the full-time Threat Hunter Investigator will conduct proactive investigations into insider threats and suspicious user activity while working remotely during EST business hours.

Key responsibilities:

• Conduct proactive threat hunting and investigations focused on insider threats and suspicious user activity
• Develop, test, deploy, and tune advanced Splunk detection content using SPL and correlation searches
• Produce clear investigative reports and actionable recommendations for security stakeholders

Required qualifications:

• 8+ years of experience in digital threat investigations and insider threat analysis
• Advanced hands-on experience with Splunk Enterprise Security and complex SPL queries
• Strong experience in developing Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA) programs
• Proven ability to translate threat intelligence into production-ready detections