Threat Hunting Investigator

Job Summary

To support a leading technology and cybersecurity organization, the long-term remote Threat Hunting Investigator will lead proactive threat hunting efforts, develop advanced security detections, and protect sensitive intellectual property through investigations and threat analysis.

Key responsibilities

• Lead proactive threat hunting efforts using endpoint, identity, cloud, and network telemetry to identify suspicious user behavior and insider risk activity
• Design, build, and optimize advanced detections and risk-based alerting workflows within Splunk Enterprise Security and related platforms
• Investigate potential intellectual property protection concerns through log analysis, digital forensics, and behavioral analytics across multiple data sources

Required qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline
• 8+ years of experience in cyber investigations, insider threat analysis, incident response, threat hunting, or digital forensic examinations
• 5+ years of hands-on experience developing and maintaining security detections within Splunk
• Experience creating production-ready detection logic and measurable security use cases from initial threat hypotheses
• Strong understanding of endpoint security, Microsoft Defender, and user behavior analytics platforms