Threat Hunter Investigator

Job Summary

Operating remotely during EST business hours, the Threat Hunter Investigator will conduct proactive threat hunting and investigations focused on insider threats and suspicious user behavior while developing advanced Splunk detections and analytics solutions.

Key responsibilities:

• Conduct proactive threat hunting and investigations to identify insider threats and protect critical intellectual property
• Design, develop, test, deploy, and tune advanced Splunk detections and correlation searches using SPL
• Produce detailed investigative reports and actionable recommendations to support security operations and risk mitigation

Required qualifications:

• 8+ years of experience in digital threat investigations and insider threat analysis
• Advanced hands-on experience with Splunk Enterprise Security and writing complex SPL queries
• Strong experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)
• Proven ability to translate threat intelligence into operational detections and response workflows