Senior Threat Intelligence Engineer (48)

Summary

To support the STRIKE Threat Intelligence team, the full-time Senior Threat Intelligence Engineer will manage the transition of research outputs into production-ready artifacts, build and maintain platform components, and develop detection content while working remotely.Key ResponsibilitiesOwn the path from research output to production-ready artifacts, ensuring clean handoff contracts with adjacent teamsBuild and maintain STRIKE platform components, including distribution servers and rules engines, while adhering to existing data contractsTurn research into shipped detection content and build correlation pipelines that integrate various threat intelligence signalsRequired QualificationsBachelor's or Master's in Computer Science, Cybersecurity, or a related technical field; self-taught practitioners with strong public work are welcome5 to 8 years in a hands-on engineering role with exposure to threat intelligence, security research, or detection engineeringProficiency in Python and TypeScript/Node at a production levelExperience with STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CKHands-on experience with YARA, Sigma, and detection logic development

Job Description

To support the STRIKE Threat Intelligence team, the full-time Senior Threat Intelligence Engineer will manage the transition of research outputs into production-ready artifacts, build and maintain platform components, and develop detection content while working remotely.Key ResponsibilitiesOwn the path from research output to production-ready artifacts, ensuring clean handoff contracts with adjacent teamsBuild and maintain STRIKE platform components, including distribution servers and rules engines, while adhering to existing data contractsTurn research into shipped detection content and build correlation pipelines that integrate various threat intelligence signalsRequired QualificationsBachelor's or Master's in Computer Science, Cybersecurity, or a related technical field; self-taught practitioners with strong public work are welcome5 to 8 years in a hands-on engineering role with exposure to threat intelligence, security research, or detection engineeringProficiency in Python and TypeScript/Node at a production levelExperience with STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CKHands-on experience with YARA, Sigma, and detection logic development