Threat Hunting Investigator

Job Summary

To support a leading technology organization in protecting critical intellectual property, the long-term contract Threat Hunting Investigator will conduct technical investigations and engineer advanced security detections in Splunk environments while working remotely in the United States.

Key responsibilities

• Conduct threat hunting and investigations focused on insider threats and critical IP theft
• Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA
• Perform endpoint forensic analysis and produce clear investigative reports

Required qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field
• 8-10 years of insider threat, digital investigation, and endpoint forensic experience
• 5+ years of hands-on Splunk security detection engineering experience
• Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA
• Experience with MITRE ATT&CK and multi-source security telemetry