Threat Hunting Investigator

Responsibilities: of the Threat Hunting Investigator include: · Lead proactive threat hunting efforts utilizing endpoint, identity, cloud, and network telemetry to identify suspicious user behavior and insider risk activity. · Design, build, and optimize advanced detections, correlation searches, and risk-based alerting workflows within Splunk Enterprise Security and related security platforms. · Investigate potential intellectual property protection concerns through log analysis, digital forensics, and behavioral analytics across multiple data sources. · Transform threat intelligence, investigative findings, and MITRE ATT&CK techniques into scalable detection content, response procedures, and operational playbooks. · Partner with cross-functional security teams to improve monitoring capabilities, reduce false positives, and strengthen overall detection coverage. Qualifications: for the Threat Hunting Investigator include: · Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline. · 8+ years of experience conducting cyber investigations, insider threat analysis, incident response, threat hunting, or digital forensic examinations. · 5+ years of hands-on experience developing and maintaining security detections within Splunk, including SPL development, Enterprise Security, and Risk-Based Alerting (RBA). · Experience creating production-ready detection logic, correlation searches, behavioral analytics, and measurable security use cases from initial threat hypotheses. · Strong understanding of endpoint security, Microsoft Defender, Microsoft Purview, cloud-based telemetry, and user behavior analytics platforms. · Working knowledge of Cisco technologies, enterprise networking concepts, and the relationship between infrastructure assets and security monitoring programs. Compensation: for the Threat Hunting Investigator: Salary Range: $140,000-$165,000/year (USD) Comprehensive Benefits: Medical, Dental, Vision, sick leave if required by law, and 401K This job opens for applications on 10/1/26. Applications for this job will be accepted for at least 30 days from the posting date.