Threat Intelligence Engineer (REMOTE)

📋 Description

• Map feeds to STIX and own the connector portfolio.
• Design and maintain STIX 2.1 mappings across sources.
• Understand threat intel feed data models; inspect payloads to ground truth.
• Own connector lifecycle from onboarding to schema drift detection.
• Collaborate with feed partners on integrations; use AI to accelerate workflows.

🎯 Requirements

• US Citizenship required per 8 U.S.C 1324b(a)(2)(C).
• 5+ years in threat intelligence with enterprise-scale security products.
• Deep STIX/TAXII 2.1 knowledge; production mappings.
• Hands-on with threat feeds and MITRE ATT&CK-aligned workflows.
• Python: API clients, parsers, normalizers, validators.
• Practical AI fluency; used LLMs for schema inference and mapping.

🎁 Benefits

• Exciting startup culture with growth opportunities.
• Comprehensive benefits: time off, holidays, retirement, insurance.
• Investment in your career with professional development.
• Competitive compensation packages.