Counter-Threat Intelligence Engineer

Role Description

Cambium Learning Group is seeking a Counter-Threat Intelligence Engineer to enhance the organization’s ability to identify, understand, and counter cyber threats that could impact our learners, educators, associates, platforms, data, and business operations. This role combines threat intelligence, ethical hacking, exposure validation, adversary emulation, and security engineering to turn emerging threat information into actionable defenses.

• Work closely with Security Operations, IT Operations, Risk, Legal Compliance, Product, Engineering, and business stakeholders.
• Help reduce attack surface, improve detection logic, support incident response, and translate technical findings into clear recommendations.
• Bring hands-on offensive security experience, exceptional analytical judgment, and the ability to communicate threat context effectively.

Qualifications

• 5+ years of progressive cybersecurity experience, with at least 2 years in threat intelligence, ethical hacking, penetration testing, detection engineering, security operations, incident response, vulnerability management, or a closely related role.
• Certified Ethical Hacker (CEH) certification is highly preferred; similar hands-on offensive security or threat intelligence certifications may be considered, such as OSCP, GPEN, CompTIA PenTest+, CPENT, eJPT, GCTI, CTIA, or equivalent practical experience.
• Proven working knowledge of the cyber kill chain, MITRE ATT&CK, common attack techniques, malware and phishing behaviors, cloud and identity threats, vulnerability exploitation, attacker infrastructure, and defensive countermeasures.
• Hands-on experience with security tools and data sources such as SIEM, XDR/EDR, vulnerability scanners, threat intelligence platforms, cloud security tools, identity logs, endpoint telemetry, network telemetry, and ticketing/workflow platforms.
• Ability to write clear threat intelligence summaries, detection recommendations, executive briefings, remediation guidance, and technical documentation that can be acted on by cross-functional teams.
• Experience conducting authorized security testing, adversary emulation, attack surface analysis, detection validation, or threat hunts in a disciplined, evidence-based, and policy-aligned manner.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred; equivalent professional experience and certifications may be considered.
• High judgment, strong ethics, discretion with sensitive information, collaborative communication style, and commitment to protecting confidential, proprietary, student, customer, associate, and business data.

Requirements

• Experience in education technology, SaaS, cloud-first, remote-first, or regulated environments.
• Experience building threat hunting content, Sigma/YARA rules, KQL/SPL queries, detection-as-code, or automation for enrichment and triage.
• Familiarity with scripting or automation using Python, PowerShell, Bash, APIs, or SOAR-style workflows.
• Working knowledge of data privacy, secure software development, third-party risk, and compliance frameworks such as ISO 27001, SOC 2, NIST CSF, or NIST SP 800-series guidance.

Benefits

• Remote First approach providing flexibility and trust to balance work with life.
• Reimbursement to help cover the cost of setting up your home or remote office.

Company Description

We are dedicated to fostering a culture that celebrates unique backgrounds, ideas, and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, age, religion, sex (including pregnancy, gender, gender identity/expression, or sexual orientation), national origin, protected veteran status, disability, or genetic information (including family medical history).

We will provide reasonable accommodations for qualified individuals with disabilities. You may request an accommodation during the recruiting process with your Talent Acquisition team member.