Senior Staff Engineer Cyber Threat Intelligence (Process Developer)
Core
Collect and analyze cyber threat data to produce actionable intelligence for detection, assessment, and mitigation of threats, while formalizing investigative practices into repeatable team playbooks.
Role type
Senior Staff Cyber Threat Intelligence Analyst (Process Developer)
Builds
Intelligence reports, detection logic recommendations, and standardized investigation playbooks for SOC, Incident Response, and Detection Engineering teams.
Domain
Cybersecurity / Threat Intelligence / Semiconductor Industry
Required skills
Threat intelligence frameworks (MITRE ATT&CK, Cyber Kill Chain), adversary infrastructure analysis, structured analytic techniques, KQL/Logscale query writing, Linux/networking/identity fundamentals, LLM-based tool application, executive-level technical writing
Preferred skills
Experience with OSINT and dark web monitoring, industry partner/ISAC relationships, vulnerability management collaboration
Technologies
MITRE ATT&CK, Cyber Kill Chain, Diamond Model, F3EAD, KQL, Logscale, LLM-based tools, Linux, networking, identity technologies
Responsibilities
Monitor and assess cyber threats across OSINT, dark web, and proprietary sources; conduct in-depth research on threat actors and campaigns; enrich intelligence with internal security telemetry; design and document investigation playbooks; produce actionable reports for security teams and executives; translate findings into detection logic recommendations; partner with SOC, IR, and Detection Engineering to refine detection and response.
Seniority
Senior Staff, hands-on IC with process development focus
