Threat Hunting Investigator

Job Summary

To support a leading technology and cybersecurity organization, the Threat Hunting Investigator will engage in long-term remote consulting, focusing on identifying insider risk activity, developing advanced security detections, and protecting sensitive intellectual property through proactive investigations and threat analysis.

Key responsibilities:

• Lead proactive threat hunting efforts utilizing various telemetry to identify suspicious user behavior and insider risk activity
• Design, build, and optimize advanced detections and alerting workflows within Splunk Enterprise Security and related platforms
• Investigate potential intellectual property protection concerns through log analysis and digital forensics across multiple data sources

Required qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline
• 8+ years of experience in cyber investigations, insider threat analysis, incident response, threat hunting, or digital forensics
• 5+ years of hands-on experience with security detections within Splunk, including SPL development and Risk-Based Alerting
• Experience in creating detection logic, correlation searches, and measurable security use cases from initial threat hypotheses
• Strong understanding of endpoint security, cloud-based telemetry, and user behavior analytics platforms