Threat Investigator

Job Summary

To support a leading cybersecurity organization, the remote Threat Investigator will monitor, detect, investigate, and respond to security incidents while utilizing Splunk Enterprise Security and Splunk UEBA to identify potential threats.

Key responsibilities

• Monitor, detect, investigate, and respond to security incidents across enterprise environments
• Conduct threat assessments and perform in-depth investigations of security events and alerts
• Collaborate with security operations and engineering teams during incident response activities

Required qualifications

• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments
• Hands-on experience with Splunk Enterprise Security and/or Splunk User Behavior Analytics (UEBA)
• Strong understanding of enterprise security concepts and incident response processes
• Experience investigating suspicious user activity and insider threat indicators
• Ability to work remotely while supporting distributed security operations teams