Threat Hunting Investigator

Job Summary

To support insider threat investigations and advanced threat detection initiatives, the full-time Threat Hunting Investigator will conduct proactive threat hunting, analyze suspicious activities, and perform digital investigations in a remote environment.

Key responsibilities:

• Conduct proactive threat hunting activities focused on insider threats and intellectual property theft
• Analyze logs and telemetry to identify suspicious activity and potential threat actors
• Develop and present investigative findings and recommendations to stakeholders

Required qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field
• 8+ years of experience in insider threat investigations and implementing security countermeasures
• 5+ years of hands-on experience with Splunk security detections and Risk-Based Alerting
• Strong expertise in developing detection content using advanced SPL and correlation searches
• Experience analyzing AWS CloudTrail and insider-risk telemetry data is highly preferred