Threat Hunting Investigator

Job Summary

Working remotely on Eastern Standard Time, the Threat Hunting Investigator will identify, investigate, and mitigate risks posed by internal actors, conducting research and producing investigative reports to protect critical intellectual property.

Key responsibilities:

• Conduct proactive threat hunting and insider risk investigations using various data sources to identify potential security threats
• Research and analyze threats involving sensitive data exposure and intellectual property theft, producing clear investigative reports
• Design and deploy advanced threat detections using Splunk SPL and maintain Risk-Based Alerting workflows within Splunk Enterprise Security

Required qualifications:

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or related field
• 8+ years of experience in threat investigations and digital forensic investigations involving sensitive data
• Strong hands-on experience with Splunk Enterprise Security, including engineering and maintaining security detections
• Proven ability to write advanced SPL queries and develop custom detections and threat-hunting content
• Deep experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)