Threat Hunting Investigator

Job Summary

To support a leading technology and cybersecurity organization, the long-term remote Threat Hunting Investigator will lead proactive threat hunting efforts, develop advanced security detections, and protect sensitive intellectual property through investigations and threat analysis.

Key responsibilities:

• Lead proactive threat hunting efforts utilizing various telemetry to identify suspicious user behavior and insider risk activity
• Design, build, and optimize advanced detections and alerting workflows within Splunk Enterprise Security
• Investigate potential intellectual property protection concerns through log analysis and digital forensics

Required qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline
• 8+ years of experience in cyber investigations, insider threat analysis, or digital forensic examinations
• 5+ years of hands-on experience developing security detections within Splunk
• Experience creating production-ready detection logic and measurable security use cases
• Strong understanding of endpoint security and cloud-based telemetry