Threat Investigator - 175638 - 176135 -

Piper Companies is seeking a Threat Investigator to support a leading cybersecurity and incident response organization focused on protecting enterprise environments from advanced threats. The Threat Investigator role is ideal for a security professional with experience in CSIRT operations, threat detection, incident response, and user behavior analytics, particularly within Splunk Enterprise Security and Splunk UEBA environments.

Responsibilities of the Threat Investigator:

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Utilize Splunk Enterprise Security and Splunk UEBA to identify anomalous user behavior and potential threats.
• Conduct threat assessments, event monitoring, incident detection, and response activities.
• Perform in-depth investigations and root cause analysis of security events and alerts.
• Develop mitigation strategies and recommendations to reduce organizational security risk.
• Analyze user behavior trends and suspicious activity to support proactive threat hunting efforts.
• Collaborate with security operations, engineering, and leadership teams during incident response activities.
• Support vulnerability management initiatives and contribute to security architecture discussions.
• Document investigative findings and provide recommendations to stakeholders.
  
  

Qualifications of the Threat Investigator:

• Must be eligible to obtain a Secret Clearance.
• Experience in Threat Investigation, Incident Response, SOC, or CSIRT environments.
• Hands-on experience with Splunk Enterprise Security and/or Splunk User Behavior Analytics (UEBA).
• Strong understanding of enterprise security concepts, threat detection methodologies, and incident response processes.
• Experience investigating suspicious user activity, insider threat indicators, and behavioral anomalies.
• Familiarity with security monitoring, log analysis, SIEM technologies, and threat intelligence.
• Knowledge of security frameworks, attack techniques, and cyber threat lifecycle concepts.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work remotely while supporting distributed security operations teams.
  
  

Compensation for the Threat Investigator includes:

• Salary range: $120,000 – $180,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO
  
  

This job opens for applications on 10/30/2026. Applications for this job will be accepted for at least 30 days from the posting date.