Insider Threat Engineer - 176675 - 177069

Piper Companies is seeking an Insider Threat Engineer to join a leading cybersecurity organization. The Insider Threat Engineer will be responsible for identifying, investigating, and mitigating insider threats through advanced analytics, user behavior monitoring, and threat detection technologies. This role is ideal for a security professional with strong SPL querying expertise and hands-on experience with UEBA platforms.

Responsibilities of the Insider Threat Engineer:

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL (Search Processing Language).

• Monitor and investigate insider threat activity utilizing User and Entity Behavior Analytics (UEBA) platforms.

• Analyze anomalous user behavior, data exfiltration attempts, policy violations, and other insider risk indicators.

• Create and optimize detection content, dashboards, and alerting mechanisms to improve threat visibility.

• Collaborate with security operations, incident response, legal, HR, and business teams during investigations.

• Conduct proactive threat hunting activities across enterprise environments.

• Support incident response activities related to insider threat investigations and suspicious user behavior.

• Develop and maintain documentation, investigation procedures, and threat detection use cases.

• Recommend improvements to insider risk monitoring capabilities and security controls.

Qualifications of the Insider Threat Engineer:

• 4+ years of experience in cybersecurity, threat detection, insider threat, or security operations roles.

• Strong hands-on experience writing and optimizing SPL queries.

• Experience working with UEBA platforms such as Splunk UBA, Exabeam, Securonix, Microsoft Sentinel UEBA, or similar technologies.

• Experience investigating insider threat incidents, user activity monitoring, and behavioral analytics.

• Knowledge of SIEM technologies, log analysis, and threat detection methodologies.

• Understanding of endpoint, network, cloud, and identity security monitoring.

• Experience conducting threat hunting and security investigations in enterprise environments.

• Strong analytical, documentation, and communication skills.

• Relevant security certifications such as Security+, CySA+, GCIH, GCFA, CISSP, or similar are preferred.

Compensation for the Insider Threat Engineer includes:

• Salary range: $120,000 - $160,000 depending on experience

• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/23/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-JN1

#LI-REMOTE