Threat Hunting Investigator

Job Summary

Working remotely with EST hours, the Threat Hunting Investigator will identify, investigate, and mitigate risks posed by internal actors, focusing on proactive threat hunting and insider risk investigations to protect critical intellectual property.

Key responsibilities:

• Conduct proactive threat hunting and insider risk investigations using logs, telemetry, and behavioral indicators to identify potential security threats
• Research, analyze, and mitigate threats involving sensitive data exposure and intellectual property theft, producing clear investigative reports
• Design and tune advanced threat detections using Splunk SPL, and maintain Risk-Based Alerting workflows within Splunk Enterprise Security

Required qualifications:

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field
• 8+ years of experience in threat investigations, insider threat analysis, and digital forensic investigations
• Strong hands-on experience with Splunk Enterprise Security, including engineering and maintaining security detections
• Proven ability to write advanced SPL queries and develop custom detections and threat-hunting content
• Deep experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA) methodologies