Threat Hunter Investigator

Job Summary

Proactively identifying and investigating insider threats, the fully remote Threat Hunter Investigator will mitigate risks related to malicious, negligent, or compromised accounts while supporting the protection of critical intellectual property and sensitive company data.

Key responsibilities:

• Conduct proactive threat hunting and insider threat investigations using logs, endpoint data, and behavioral analytics
• Investigate potential intellectual property theft and data loss, documenting findings and recommendations
• Develop and tune advanced threat detections within Splunk Enterprise Security and maintain Risk-Based Alerting use cases

Required qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 8+ years of experience in cyber investigations, insider threat analysis, and digital forensics
• Strong hands-on experience with Splunk Enterprise Security and detection engineering
• Advanced experience writing SPL queries and developing custom detections
• Strong understanding of threat hunting methodologies and translating threat intelligence into actionable detections