Threat Investigator

Job Summary

To support a leading cybersecurity organization, the remote Threat Investigator will monitor, detect, and respond to security incidents while utilizing Splunk Enterprise Security and UEBA to identify threats and anomalous user behavior.

Key responsibilities:

• Monitor and investigate security incidents across enterprise environments
• Conduct threat assessments and perform in-depth investigations of security events
• Collaborate with security operations and engineering teams during incident response activities

Required qualifications:

• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments
• Hands-on experience with Splunk Enterprise Security and/or Splunk UEBA
• Strong understanding of enterprise security concepts and threat detection methodologies
• Experience investigating suspicious user activity and insider threat indicators
• Knowledge of security frameworks and cyber threat lifecycle concepts