Threat Intelligence Engineer

What you'll do

• Manage threat feeds and parse indicators of compromise to ensure data quality across platforms.
• Analyze emerging threats and adversary tactics to engineer robust detection and prevention mechanisms.
• Ingest and operationalize threat intelligence into SIEM, EDR, and firewall systems.
• Build and maintain API integrations and scripts to automate indicator ingestion and correlation.
• Deploy, configure, and tune Threat Intelligence Platforms and related security engineering tools.
• Generate timely intelligence alerts and tactical reports to provide context on active threats.

What we're looking for

• 2-4 years of experience in cybersecurity.
• At least 1-2 years of experience focused on threat intelligence, security engineering, or security operations (SOC).
• Solid understanding of network fundamentals, operating system internals, common attack vectors, and the cyber threat landscape.
• Experience working with APIs, data formats (JSON, XML, STIX/TAXII), and systems integration.
• Ability to analyze data from various sources to draw technical conclusions and identify malicious activity.
• Familiarity with threat intelligence and security frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Hands-on experience with SIEM systems, threat intelligence platforms (TIPs), or EDR solutions.
• Proficiency in scripting languages (Python, PowerShell, or Bash) (preferred).
• Relevant industry certifications such as CompTIA Security+, CySA+, or GIAC (GSEC, GCTI) (preferred).
• Familiarity with securing and monitoring cloud environments (AWS, Azure, or GCP) (preferred).
• Basic understanding of malware analysis or reverse engineering concepts (preferred).