Cyber Threat Intelligence Engineer
Core
Producing actionable threat intelligence, actor profiles, and trend reports to inform detection, incident response, and vulnerability prioritization.
Role type
Cyber Threat Intelligence Engineer
Builds
Actionable threat briefs, adversary profiles, trend reports, and intelligence-driven detection gaps
Domain
Cybersecurity / Threat Intelligence
Required skills
MITRE ATT&CK framework mapping, threat intelligence platform usage, SIEM/EDR investigation, vulnerability management, structured analytic techniques, source reliability assessment, open-source and dark-web monitoring, STIX/TAXII standards
Preferred skills
Python scripting, SQL data analysis, red team collaboration, purple-team exercises, exposure management integration
Technologies
Python, SQL, SIEM, EDR, MITRE ATT&CK, STIX, TAXII
Responsibilities
Track threat actors, campaigns, and TTPs; partner with SOC to contextualize alerts; collaborate with Detection Engineering to identify coverage gaps; work with Red Team on emulation plans; provide intelligence to Exposure Management; monitor open-source and dark-web sources; maintain adversary tracking materials; deliver tactical and strategic intelligence; support incident response as a liaison; contribute to purple-team exercises
Seniority
Mid-Senior level (5+ years experience)
