Threat Hunting Investigator

Job Summary

To support a leading technology organization, the Threat Hunting Investigator will conduct technical investigations and engineer advanced security detections across Splunk environments in a long-term remote contract opportunity.

Key responsibilities:

• Conduct threat hunting and investigations focused on insider threats and critical IP theft
• Analyze endpoint, identity, cloud, network, and behavioral telemetry
• Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA

Required qualifications:

• Bachelor's degree in Computer Science, Information Systems, or related field
• 8-10 years of insider threat, digital investigation, and endpoint forensic experience
• 5+ years of hands-on Splunk security detection engineering experience
• Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA
• Experience with MITRE ATT&CK and multi-source security telemetry