Bachelor's degree in cybersecurity, computer science, or related field preferred; relevant experience may substitute for degree.
Master's degree in cybersecurity or related field strongly preferred; advanced qualifications may be considered.
Experience in cybersecurity engineering, security automation, or threat engineering is essential.
Direct experience in Cyber Threat Intelligence or threat-hunting is required.
Proficiency in Python (3+ years) and experience with script-based automation and YARA/SIGMA rule development.
Practical application of the MITRE ATT&CK framework in cybersecurity or threat-hunting contexts is necessary.
Relevant cybersecurity certifications (Security+, CySA+, GCIH, GCIA) are preferred but not mandatory.
Responsibilities
Develop and maintain tools and automated workflows for TIER threat-hunting operations.
Build processes for collecting and operationalizing threat intelligence data.
Create and maintain YARA rules and detection processes.
Develop Python utilities to enhance workflow efficiency and scalability.
Translate analyst needs into technical solutions and automated processes.
Apply the MITRE ATT&CK framework in tool and detection development.
Integrate threat intelligence sources into TIER workflows and tools.
Perform quality assurance and troubleshooting for tools and automation before deployment.
Maintain documentation for developed capabilities.
Benefits
Opportunities for professional development and training.
Access to cutting-edge cybersecurity tools and technologies.
Collaborative work environment with a focus on innovation.
Flexible work arrangements to support work-life balance.
Full Job Description
Key Responsibilities:
Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.
Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
Develop, test, document, and maintain YARA rules and supporting detection processes.
Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.
Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
Maintain technical documentation and procedures needed to sustain developed capabilities.
Preferred Qualifications:
Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.
