Threat Hunting Investigator - 176600 - 177226

Responsibilities: of the Threat Hunting Investigator: • Conduct threat hunting and investigations focused on insider threats and critical IP theft. • Analyze endpoint, identity, cloud, network, and behavioral telemetry. • Build, deploy, and tune advanced Splunk detections using SPL, Enterprise Security, RBA, and UEBA. • Translate threat research and MITRE ATT&CK techniques into production-ready detection logic. • Perform endpoint forensic analysis and produce clear investigative reports. • Test and continuously improve detection accuracy, coverage, and response workflows. Requirements of the Threat Hunting Investigator: • Bachelor's degree in Computer Science, Information Systems, or related field. • 8-10 years of insider threat, digital investigation, and endpoint forensic experience. • 5+ years of hands-on Splunk security detection engineering experience. • Advanced experience with SPL, Splunk Enterprise Security, RBA, and UEBA. • Experience with MITRE ATT&CK and multi-source security telemetry. • Experience with AWS CloudTrail, Microsoft Defender, Code42, or Digital Guardian preferred. • Strong investigative judgment and communication skills. Compensation: for the Threat Hunting Investigator: • $120,000 - $160,000 • Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.