Threat Investigator

Summary

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity organization in a hybrid capacity in Durham, NC. The Threat Investigator will play a critical role in identifying, analyzing, and responding to advanced cyber threats while helping to safeguard enterprise systems, networks, and sensitive data from evolving security risks.

Responsibilities of the Threat Investigator:

• Conduct proactive threat hunting activities across enterprise environments to identify indicators of compromise and malicious behavior.
• Investigate security alerts, incidents, and anomalies to determine scope, impact, and root cause.
• Analyze threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cyber risks.
• Correlate data from security tools including SIEM, EDR, IDS/IPS, and network monitoring platforms.
• Develop and document investigative findings, response actions, and recommendations for security improvements.
• Collaborate with incident response, SOC, engineering, and infrastructure teams to remediate identified threats.
• Create and maintain threat detection logic, use cases, and investigative playbooks.
• Support digital forensic investigations and evidence collection efforts when necessary.

Qualifications of the Threat Investigator:

• 4+ years of experience in cyber threat investigation, threat hunting, incident response, or security operations.
• Experience utilizing SIEM platforms such as Splunk, Sentinel, QRadar, or similar technologies.
• Strong understanding of threat intelligence frameworks, including MITRE ATT&CK.
• Hands‑on experience with endpoint detection and response (EDR) tools and security monitoring technologies.
• Proficiency analyzing Windows, Linux, cloud, and network security events.
• Familiarity with malware analysis principles and digital forensics methodologies.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, Security+, or comparable certifications are preferred.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred.

Compensation for the Threat Investigator includes:

• Salary range: $120,000 - $150,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, and prescription coverage

This job opens for applications on 09/24/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Job Description

Piper Companies is seeking a Threat Investigator to join a leading cybersecurity organization in a hybrid capacity in Durham, NC. The Threat Investigator will play a critical role in identifying, analyzing, and responding to advanced cyber threats while helping to safeguard enterprise systems, networks, and sensitive data from evolving security risks.

Responsibilities of the Threat Investigator:

• Conduct proactive threat hunting activities across enterprise environments to identify indicators of compromise and malicious behavior.
• Investigate security alerts, incidents, and anomalies to determine scope, impact, and root cause.
• Analyze threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cyber risks.
• Correlate data from security tools including SIEM, EDR, IDS/IPS, and network monitoring platforms.
• Develop and document investigative findings, response actions, and recommendations for security improvements.
• Collaborate with incident response, SOC, engineering, and infrastructure teams to remediate identified threats.
• Create and maintain threat detection logic, use cases, and investigative playbooks.
• Support digital forensic investigations and evidence collection efforts when necessary.

Qualifications of the Threat Investigator:

• 4+ years of experience in cyber threat investigation, threat hunting, incident response, or security operations.
• Experience utilizing SIEM platforms such as Splunk, Sentinel, QRadar, or similar technologies.
• Strong understanding of threat intelligence frameworks, including MITRE ATT&CK.
• Hands‑on experience with endpoint detection and response (EDR) tools and security monitoring technologies.
• Proficiency analyzing Windows, Linux, cloud, and network security events.
• Familiarity with malware analysis principles and digital forensics methodologies.
• Strong analytical, communication, and documentation skills.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, Security+, or comparable certifications are preferred.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred.

Compensation for the Threat Investigator includes:

• Salary range: $120,000 - $150,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, and prescription coverage

This job opens for applications on 09/24/2026. Applications for this job will be accepted for at least 30 days from the posting date.