Threat Intelligence Engineer
New
C
CywareCybersecurity
REMOTE, Demonstrated ability to work successfully with colleagues across different time zones and geographiesFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in threat intelligence
- Required Skills
- PythonArtificial Intelligence
Requirements
- 5+ years in threat intelligence as an analyst, engineer, or specialist.
- Hands-on experience on enterprise-scale security products.
- Deep working knowledge of STIX/TAXII 2.1 objects, relationships, patterning, and markings.
- Proven experience implementing STIX mappings in production environments.
- Hands-on experience with commercial and open-source threat feeds and enrichment sources such as CrowdStrike, Mandiant, Recorded Future, Flashpoint, Intel 471, and MISP.
- Proficiency in Python, including writing code for API clients, parsers, normalizers, and validators.
- Practical AI fluency with experience using LLMs for technical work like schema inference and code generation.
- Strong command of the intelligence lifecycle and MITRE ATT&CK framework.
- Experience handling IOCs, TTPs, and threat actors in SOC, incident response, or threat hunting operations.
- Demonstrated ability to work successfully with colleagues across different time zones.
Responsibilities
- Design and maintain mappings from commercial, open-source, and community threat intelligence sources into STIX 2.1 objects, relationships, markings, and extensions.
- Own connector lifecycle and quality, including onboarding new sources, detecting schema drift, and validating mappings.
- Build and improve AI-assisted mapping workflows, including inferring schemas from sample payloads and flagging schema changes.
- Write threat intelligence use cases that drive product design and test new capabilities against analyst workflows.
- Represent Cyware on MITRE and industry alliance committees.
- Serve as the technical threat intelligence expert for customers, prospects, and partners.
- Enable Solution Architects, Sales Engineers, and Customer Success Managers with threat intelligence knowledge and use cases.
View Full Description & ApplyYou'll be redirected to the employer's site
