Senior Threat Intelligence Engineer
Core
Transform raw threat data into actionable security measures and automated defenses to reduce mean time to detect and respond to sophisticated cyber threats.
Role type
Senior Threat Intelligence Engineer (ML/Data Science)
Builds
Automated detection workflows, threat intelligence reports, and security automation playbooks for Cloudflare's global network.
Domain
Cybersecurity / Threat Intelligence / Machine Learning
Deliverable
production ML models | infrastructure
Required skills
Threat intelligence collection and analysis, Machine learning lifecycle management, Threat actor profiling (MITRE ATT&CK), IOC/IOA engineering, SOAR playbook development, Python scripting, Cloud security automation
Preferred skills
Malware analysis and reverse engineering, Infrastructure-as-Code (Terraform), Data visualization tools, Nation-state threat understanding
Technologies
Python, MITRE ATT&CK, SIEM, EDR, Cloud Security Posture Management, Threat Intelligence Platforms, AWS/Azure/GCP
Responsibilities
Research and analyze threat intelligence from OSINT, commercial feeds, and dark web sources; Design and maintain ML detection use cases from ingestion to inference; Develop threat actor profiles and TTPs; Engineer IOC/IOA ingestion and enrichment into security platforms; Build automated defense workflows and SOAR playbooks; Integrate security tools via APIs to create feedback loops; Provide threat context during incident response.
Seniority
Senior, hands-on IC