Threat Intelligence Engineer (REMOTE)
CywareAlso available on
Job Description
📋 Description Map feeds to STIX and own the connector portfolio. Design and maintain STIX 2.1 mappings across sources. Understand threat intel feed data models; inspect payloads to ground truth. Own connector lifecycle from onboarding to schema drift detection. Collaborate with feed partners on integrations; use AI to accelerate workflows. 🎯 Requirements US Citizenship required per 8 U.S.C 1324b(a)(2)(C). 5+ years in threat intelligence with enterprise-scale security products. Deep STIX/TAXII 2.1 knowledge; production mappings. Hands-on with threat feeds and MITRE ATT&CK-aligned workflows. Python: API clients, parsers, normalizers, validators. Practical AI fluency; used LLMs for schema inference and mapping. 🎁 Benefits Exciting startup culture with growth opportunities. Comprehensive benefits: time off, holidays, retirement, insurance. Investment in your career with professional development. Competitive compensation packages.