Threat Investigator

Job Summary

Supporting a leading cybersecurity organization, the remote Threat Investigator will monitor, detect, investigate, and respond to security incidents while utilizing Splunk Enterprise Security and UEBA to identify potential threats.

Key responsibilities

• Monitor and respond to security incidents across enterprise environments
• Conduct threat assessments and perform in-depth investigations of security events
• Collaborate with security operations and engineering teams during incident response activities

Required qualifications

• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments
• Hands-on experience with Splunk Enterprise Security and/or Splunk UEBA
• Strong understanding of enterprise security concepts and threat detection methodologies
• Experience investigating suspicious user activity and insider threat indicators
• Familiarity with security monitoring, log analysis, and SIEM technologies