Staff Security Engineer Threat Intelligence
Posted Updated
Description
You will build and scale threat intelligence capabilities, connecting external adversary intelligence with internal telemetry. You will translate intelligence into detections and security controls, integrate it into security workflows, support incident response and threat hunting, and communicate risks to technical teams and leadership.
Responsibilities
- Track relevant threat actors, campaigns, and emerging attack techniques
- Analyze adversary tactics, techniques, and procedures
- Produce actionable threat intelligence for infrastructure, cloud, and enterprise systems
- Evaluate external intelligence sources, feeds, and tooling
- Translate intelligence into detection logic, SIEM rules, and security controls
- Maintain MITRE ATT&CK mappings and identify coverage gaps
- Integrate threat intelligence into SIEM pipelines, enrichment systems, and automation workflows
- Use AI and automation to process threat data and identify patterns
- Support incident response and threat hunting with contextual intelligence
- Communicate insights, risks, and adversary activity to technical teams and leadership
Requirements
- 8+ years of experience in threat intelligence, security engineering, or detection engineering
- Understanding of threat actors, tactics, techniques, and procedures
- Experience translating intelligence into detections, rules, or security controls
- Familiarity with SIEM platforms and detection pipelines
- Experience with threat intelligence platforms and STIX/TAXII
- Understanding of cloud environments and modern infrastructure
- Experience using automation or AI/ML for intelligence analysis or enrichment
- Ability to operate at Staff level
- Clear communication skills
Benefits
- Bonus
- Equity
- Medical insurance
- Dental insurance
- Vision insurance
- Flexible paid time off
- Parental leave
- Retirement plan participation
- Flexible workplace
