Senior Software Engineer: Ransomware Collections
Core
Build and improve automated collection capabilities for ransomware intelligence, expanding beyond leak sites to include infrastructure, identities, and communities to provide high-confidence intelligence for analysts and customers.
Role type
Senior Software Engineer (Cyber Threat Intelligence Collection)
Builds
Automated access strategies, collection infrastructure, and data pipelines for dark-web and restricted-source intelligence
Domain
Cybersecurity / Threat Intelligence / Ransomware
Required skills
Python, Go, JavaScript/TypeScript, AWS, Docker, Kubernetes, Terraform, PostgreSQL, Redis, browser automation, headless browsers, authenticated session management, queue/event-driven architectures, CI/CD pipelines
Preferred skills
Experience building reliable systems against unstable or intentionally difficult-to-automate sources, adversarial web environments, identity and entity resolution
Technologies
Python, Go, JavaScript/TypeScript, AWS, Docker, Kubernetes, Terraform, S3, PostgreSQL, Redis, Playwright, Selenium, TOR, proxies, SOCKS, VPNs, GitHub
Responsibilities
Own and improve engineering capabilities for ransomware collection; Expand collection beyond conventional sources into user-focused approaches; Partner with analysts to translate intelligence requirements into technical capabilities; Develop automated access strategies for difficult sources; Build infrastructure for discovering and preserving intelligence at scale; Improve resilience and maintainability of collection systems; Establish engineering patterns for moving methodologies to production; Collaborate to structure data for downstream intelligence value; Provide technical leadership and mentorship
Seniority
Senior, hands-on IC with leadership responsibilities
