| Location |
Responsibilities: of the Threat Hunting Investigator: Conduct proactive threat hunting and investigations focused on insider threats, suspicious user activity, and protection of critical intellectual property. Develop, test, deploy, and tune advanced Splunk detection content using SPL, correlation searches, risk rules, and notable events. Configure and optimize RBA and UEBA workflows to identify high-risk behaviors and improve threat detection capabilities. Produce clear investigative reports, technical documentation, and actionable recommendations for security stakeholders. Qualifications: of the Threat Hunting Investigator: 5+ years of experience conducting digital threat investigations, insider threat analysis, and forensic investigations. Advanced hands-on experience with Splunk Enterprise Security, including authoring complex SPL queries from scratch. Strong experience developing and managing Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA) programs. Proven ability to translate threat intelligence and MITRE ATT&CK techniques into production-ready detections and security workflows.