5-7 years of experience in data engineering, DevSecOps, or SOC operations.
Proven track record in building and maintaining threat intelligence platforms.
Experience in developing automated ETL/data pipelines for CTI data.
Proficient in Bash and/or PowerShell for automation in both Linux and Windows.
Strong familiarity with data platforms like Splunk or Elastic, including query and dashboard development.
Experience with data onboarding and integration using platform add-ons.
Excellent communication and technical documentation skills.
Responsibilities
Establish and maintain a Cyber Threat Intelligence platform.
Document a catalog of classified and commercial CTI data feeds.
Build and maintain automated ETL and data pipelines for CTI data.
Develop processes for CTI feed maintenance and onboarding new data sources.
Create access control policies for CTI data access.
Integrate CTI data with enterprise security technologies like SIEM and SOAR.
Develop and maintain CTI dashboards and correlation searches for threat hunting.
Benefits
Full-time employment with a focus on career development.
Opportunity to work with cutting-edge cyber defense technologies.
Collaborative environment with cross-team engagement.
Access to training and resources for professional growth.
Full Job Description
Cyber Threat Intelligence Engineer
Employment Type: Full Time Directorate: Cyber Security Engineering
Altus Consulting is seeking a skilled Cyber Threat Intelligence Engineer to support the development, operation, and integration of enterprise Cyber Threat Intelligence (CTI) capabilities. You will work across cyber defense teams to transform threat intelligence into actionable detection, threat hunting, prevention, and incident response capabilities.
Responsibilities
Establish, operate, and maintain a Cyber Threat Intelligence platform.
Establish and document a catalog of classified and commercial CTI data feeds supporting investigations, detections, prevention, and other cyber defense functions.
Build, operate, and maintain automated ETL and data pipelines for streaming CTI data and scheduled ingestion.
Develop and document processes for reliable CTI feed maintenance and rapid onboarding of new data sources.
Develop access control policies to ensure CTI data is available only to authorized users with the appropriate need to know.
Integrate CTI data with enterprise security technologies, including SIEM, SOAR, IDS/IPS, EDR, and NDR capabilities.
Develop and maintain CTI dashboards, queries, lookup tables, and correlation searches supporting threat hunting and cyber defense operations.
Use Bash and/or PowerShell to automate processes across Linux and Windows environments.
Support CTI integration with data platforms such as Splunk or Elastic.
Update cyber defense playbooks and standard operating procedures to incorporate CTI data and security automation.
Help establish consistent CTI practices across cyber defense teams through technical integration, procedures, documentation, and training.
Support the effective application of Artificial Intelligence / Super Intelligence (AI/SI) capabilities within day-to-day SOC workflows.
Collaborate across technical teams and communicate effectively with stakeholders and leadership.
Qualifications
Demonstrated experience in data engineering, DevSecOps, SOC operations, or a similar technical role.
Demonstrated experience building, operating, or maintaining threat intelligence data repositories or platforms.
Demonstrated experience developing automated ETL/data pipelines for streaming CTI data and scheduled ingestion.
Proficiency with Bash and/or PowerShell automation in Linux and Windows environments.
Strong experience with data platforms such as Splunk or Elastic, including developing or modifying queries, dashboards, and CTI integrations.
Experience onboarding and integrating data using platform add-ons and lookup tables.
Ability to build CTI dashboards and configure correlation searches for threat hunting.
Strong communication skills, including cross-team collaboration and leadership briefings.
