Security Engineer, Threat Intelligence

Required

• The below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly, tell us where you would.
• You've tracked specific nation-state or advanced criminal actors as a core part of your job, and you know their tooling, infrastructure, and targeting well enough to anticipate their next move.
• You write production-quality Python (or similar) and have built the automation and data pipelines your intelligence work depended on, end to end.
• You've done hands-on malware, infrastructure, and log analysis to develop and validate your own findings.
• You've authored quality detection logic (YARA, Sigma, or SIEM-native queries) that shipped to production and held up against real adversary activity.
• You've worked shoulder to shoulder with detection engineers and incident responders, turning intelligence into detections, hunting hypotheses, and incident context while an event was still live.
• You write intelligence that gets read and acted on, distilling a complex campaign into a decision and a next step for an engineer or an executive.
• Bonus: An active network in the threat intelligence community and a habit of sharing in both directions. Experience defending large-scale GPU or AI compute infrastructure, data centers, or multi-tenant cloud environments. Applying LLMs or agentic tooling to accelerate collection, enrichment, and analysis. Public research, conference talks, or open-source contributions in the CTI space.
• Salary & Benefits
• Competitive total compensation package (salary + equity).
• Retirement or pension plan, in line with local norms.
• Health, dental, and vision insurance.