Threat Intelligence Platform Engineer

Responsibilities

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging so new sources are modeled and usable.
• Ship threat intelligence into detections, blocklists, data warehouses, and agent workflows.
• Partner with Security and Product stakeholders to translate intelligence requirements into production capabilities.
• Prototype and implement features, fixes, and tooling for Intelligence Analysts and stakeholders.
• Troubleshoot production systems and data quality issues and drive root-cause fixes.

Requirements

• At least 2 years of experience building and operating threat intelligence platforms or security data pipelines in production.
• Software development experience in Python, Go, and/or Storm, including deploying production-quality code and owning CI/CD after launch.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators and related intelligence data at scale.
• A track record of restoring production systems and resolving data quality issues.
• Experience translating cross-functional stakeholder needs into technical solutions in a security operations context.
• Ability to use generative AI responsibly with human oversight to improve workflow efficiency, cost, and quality.

Benefits

• Remote-first work arrangement with quarterly in-person “surges.”
• Medical, dental, vision, and 401(k) benefits.
• Potential equity and bonus eligibility in addition to base salary.