Senior Research Engineer, Threat Intelligence

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Take ownership of the transition from research outputs to production-ready artifacts, including detection rules, distributed feeds, scoring inputs, or customer alerts.

• Develop and sustain components of the STRIKE platform across various services and runtimes.

• Convert research findings into deployed detection content such as YARA, Sigma, STIX patterns, behavioral indicators, and the pipelines necessary for their distribution.

• Promote the adoption of STIX 2.1 as a standardized output schema and TAXII 2.1 as a distribution standard.

• Create automation tools to alleviate routine overhead from research activities.

• Collaborate with engineering, measurement, and platform product teams to ensure research is effectively integrated into products.

⛳️ Requirements

• A Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical discipline.

• 5 to 8 years of experience in a hands-on engineering role with significant exposure to threat intelligence, security research, or detection engineering.

• Demonstrated experience in developing production systems that utilize or produce threat intelligence data is essential.

• Proficiency in Python and TypeScript/Node at a production level.

• Familiarity with relational and cache data stores, along with at least one streaming or batch data platform.

• Experience with cloud infrastructure (AWS preferred), containers, and CI/CD pipelines.

• Understanding of STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CK, including how they function together in practice.

• Practical experience with YARA, Sigma, and STIX Patterning.

• Knowledge of Golang at a production level is considered a plus.

🏝️ Benefits

• Competitive salary.

• Stock options.

• Health benefits.

• Unlimited PTO.

• Parental leave.

• Tuition reimbursements.