Threat Hunting Investigator

Job Summary

To support a leading technology and cybersecurity organization, the long-term remote Threat Hunting Investigator will lead proactive investigations to identify insider risk activity, develop advanced security detections, and protect sensitive intellectual property.

Key responsibilities:

• Lead proactive threat hunting efforts using endpoint, identity, cloud, and network telemetry to identify suspicious user behavior
• Design and optimize advanced detections, correlation searches, and risk-based alerting workflows within Splunk Enterprise Security
• Investigate potential intellectual property protection concerns through log analysis and digital forensics across multiple data sources

Required qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline
• 8+ years of experience in cyber investigations, insider threat analysis, and incident response
• 5+ years of hands-on experience with Splunk, including SPL development and Risk-Based Alerting
• Experience creating detection logic, correlation searches, and measurable security use cases
• Strong understanding of endpoint security and cloud-based telemetry platforms