| Location |
Responsibilities: of the Threat Investigator: • Monitor, detect, investigate, and respond to security incidents across enterprise environments. • Utilize Splunk Enterprise Security and Splunk UEBA to identify anomalous user behavior and potential threats. • Conduct threat assessments, event monitoring, incident detection, and response activities. • Perform in-depth investigations and root cause analysis of security events and alerts. • Develop mitigation strategies and recommendations to reduce organizational security risk. • Analyze user behavior trends and suspicious activity to support proactive threat hunting efforts. • Collaborate with security operations, engineering, and leadership teams during incident response activities. • Support vulnerability management initiatives and contribute to security architecture discussions. • Document investigative findings and provide recommendations to stakeholders. Qualifications: of the Threat Investigator: • Must be eligible to obtain a Secret Clearance. • Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments. • Hands-on experience with Splunk Enterprise Security and/or Splunk User Behavior Analytics (UEBA). • Strong understanding of enterprise security concepts, threat detection methodologies, and incident response processes. • Experience investigating suspicious user activity, insider threat indicators, and behavioral anomalies. • Familiarity with security monitoring, log analysis, SIEM technologies, and threat intelligence. • Knowledge of security frameworks, attack techniques, and cyber threat lifecycle concepts. • Strong analytical, troubleshooting, and communication skills. • Ability to work remotely while supporting distributed security operations teams.