Threat Investigator

Job Summary

To support a leading cybersecurity organization, the remote Threat Investigator will monitor and respond to security incidents, utilize Splunk for threat detection, and conduct thorough investigations to enhance enterprise security.

Key responsibilities

• Monitor, detect, investigate, and respond to security incidents across enterprise environments
• Utilize Splunk Enterprise Security and Splunk UEBA to identify anomalous user behavior and potential threats
• Conduct in-depth investigations and root cause analysis of security events and alerts

Required qualifications

• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments
• Hands-on experience with Splunk Enterprise Security and/or Splunk User Behavior Analytics (UEBA)
• Strong understanding of enterprise security concepts, threat detection methodologies, and incident response processes
• Experience investigating suspicious user activity and insider threat indicators
• Familiarity with security monitoring, log analysis, and SIEM technologies