Insider Threat Security Engineer

Piper Companies is seeking an Insider Threat Security Engineer to support a leading technology organization. This individual will play a key role within the Cyber Security Incident Response Team (CSIRT), focusing on the detection, investigation, and remediation of insider threats and other security incidents. The ideal candidate brings a strong blend of cybersecurity, systems, and networking experience, along with a hands-on approach to threat hunting and incident response. This is a long-term remote contract opportunity available to candidates located within the United States.

Responsibilities of the Insider Threat Security Engineer:

• Investigate suspected and confirmed insider threat incidents as part of the organization's CSIRT function.
• Perform proactive threat hunting activities to identify abnormal user behavior and potential security risks.
• Lead incident response efforts from initial investigation through containment, remediation, and post-incident documentation.
• Develop, maintain, and optimize security detections, dashboards, and SPL queries within Splunk and other SIEM platforms.
• Utilize UBA and UEBA technologies to identify, analyze, and mitigate insider risk across the environment.
• Partner with infrastructure, networking, and security teams to investigate complex security events and strengthen detection capabilities.
• Analyze system logs, endpoint telemetry, network traffic, and other security data sources to support investigations and monitoring efforts.

Qualifications of the Insider Threat Security Engineer:

• 8+ years of experience in cybersecurity, security operations, incident response, threat hunting, or insider threat programs.
• Strong experience working with Splunk or comparable SIEM solutions such as Microsoft Sentinel, QRadar, LogRhythm, or Elastic.
• Proven ability to write and modify advanced SPL searches and detection logic.
• Hands-on experience investigating suspicious activity using UBA and/or UEBA platforms.
• Strong understanding of networking fundamentals including TCP/IP, DNS, routing, switching, and network security.
• Previous experience in systems administration, network engineering, or infrastructure operations is highly preferred.
• Demonstrated experience conducting security investigations, threat hunting engagements, and incident response activities.

Compensation & Benefits:

• $120,000 - $160,000
• Comprehensive benefits package including Medical, Dental, Vision, PTO, Paid Holidays, and additional leave offerings where applicable.

Keywords: Insider Threat, Threat Hunting, Incident Response, CSIRT, Splunk, SIEM, SPL, UEBA, UBA, Security Operations, Cybersecurity, Network Security, Security Investigations, Detection Engineering, Security Monitoring, Risk Management, Endpoint Security, Microsoft Sentinel, QRadar, LogRhythm, Elastic

#LI-KI1 #LI-REMOTE