Senior Threat Intelligence Engineer

Job Summary

Working remotely, the full-time Senior Threat Intelligence Engineer will manage the transition of research outputs into production-ready artifacts, build and maintain threat intelligence platform components, and produce detection content while collaborating with cross-functional teams.

Key Responsibilities:

• Own the path from research output to production-ready artifacts, ensuring clean handoff contracts with adjacent teams
• Build and maintain STRIKE platform components across multiple services, extending systems without breaking existing data contracts
• Transform research findings into shipped detection content, including YARA and Sigma patterns, and develop correlation pipelines for customer-facing intelligence

Required Qualifications:

• Bachelor's or Master's in Computer Science, Cybersecurity, or a related technical field; self-taught practitioners with strong public work are welcome
• 5 to 8 years in a hands-on engineering role with exposure to threat intelligence, security research, or detection engineering
• Proficiency in Python and TypeScript/Node at a production level, along with experience in cloud infrastructure (preferably AWS) and CI/CD pipelines
• Hands-on experience with detection and research tooling such as YARA, Sigma, and STIX Patterning
• Experience with applied language models in production systems, including retrieval over a real corpus and structured output with schema validation