Threat Hunter Investigator

Job Summary

Proactively identifying and investigating insider threats, the fully remote Threat Hunter Investigator will focus on mitigating risks related to intellectual property and sensitive company data while working EST hours.

Key responsibilities:

• Conduct proactive threat hunting and insider threat investigations using logs, endpoint data, and behavioral analytics
• Investigate potential intellectual property theft and data loss, documenting findings and recommendations
• Develop and tune advanced threat detections within Splunk Enterprise Security and maintain Risk-Based Alerting use cases

Required qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 8+ years of experience in cyber investigations and insider threat analysis
• Strong hands-on experience with Splunk Enterprise Security and detection engineering
• Advanced experience writing SPL queries and developing custom detections
• Experience with RBA and UEBA, including risk scoring and anomaly detection