Senior Threat Intelligence Engineer
New
C
CoalitionCybersecurity insurance
Listing locations: CanadaFull-TimeSenior
Salary106,700 - 133,425 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in threat intelligence, vulnerability research, pen testing, or defensive security engineering
- Required Skills
- PythonSQL
Requirements
- Have 5+ years of experience in threat intelligence, vulnerability research, pen testing, or defensive security engineering.
- Bring deep knowledge of network protocols, operating systems, web apps, and exploitation, including RCE, auth bypass, and edge-device vulnerabilities.
- Have experience assessing new vulnerabilities under time pressure and translating them into practical enterprise risk.
- Have hands-on experience writing scanner detections, signatures, or parsing scripts using Python, regex, or protocol fingerprints.
- Have experience with honeypots, deception tech, internet-wide scanning, or other large security datasets.
- Have strong Python and SQL skills.
- Be able to communicate with technical and non-technical audiences.
- Have a track record of clear documentation or public security writing, and the judgment to lead complex work independently.
- Experience with Censys, Shodan, BinaryEdge, or attack surface mapping is a bonus.
- Reverse engineering, patch diffing, or PoC exploit verification experience is a bonus.
- Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS is a bonus.
- Public research, CVE credits, conference talks, or knowledge of cyber insurance, underwriting, or risk aggregation modeling is a bonus.
Responsibilities
- Drive the Zero-Day Alert process from vulnerability triage to actionable policyholder notification.
- Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities.
- Write and refine technology fingerprints, detection rules, and security findings that turn scan data into reliable risk signals.
- Maintain and expand the distributed honeypot network, analyzing telemetry for exploitation and new adversary techniques.
- Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research.
- Publish advisories, research, and briefings that inform security decisions.
- Participate in the on-call rotation for emergency notifications.
View Full Description & ApplyYou'll be redirected to the employer's site
