Threat Hunter Investigator

Job Summary

Proactively identifying and investigating insider threats, the fully remote Threat Hunter Investigator will mitigate risks related to intellectual property theft and sensitive data loss while working EST hours.

Key responsibilities:

• Conduct proactive threat hunting and insider threat investigations using logs, endpoint data, and behavioral analytics
• Investigate incidents of potential data loss and document findings and recommendations
• Develop and tune advanced threat detections within Splunk Enterprise Security and create detection content aligned to MITRE ATT&CK

Required qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• 8+ years of experience in cyber investigations and insider threat analysis
• Strong hands-on experience with Splunk Enterprise Security and detection engineering
• Advanced experience writing SPL queries and developing custom detections
• Understanding of threat hunting methodologies and translating threat intelligence into actionable detections