Threat Hunting Investigator

Job Summary

To support a leading technology organization, the long-term contract Threat Hunting Investigator will conduct technical investigations and engineer advanced security detections across Splunk environments while working remotely in the United States.

Key responsibilities

• Conduct threat hunting and investigations focused on insider threats and critical IP theft
• Analyze endpoint, identity, cloud, network, and behavioral telemetry
• Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA

Required qualifications

• Bachelor's degree in Computer Science, Information Systems, or related field
• 8-10 years of insider threat, digital investigation, and endpoint forensic experience
• 5+ years of hands-on Splunk security detection engineering experience
• Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA
• Experience with MITRE ATT&CK and multi-source security telemetry