Cyber Threat Intelligence Engineer - Director - Cybersecurity Engineering

Overview

Cyber Threat Intelligence (CTI) Engineer role in the CDRR Technology team in Mumbai, focused on building threat-centric analytics and automating data flows to support CTI analysts.

What you'll do

• Design, develop, and improve systems to collect, store, process, and analyze raw data for actionable threat intelligence.
• Evaluate new data sources and APIs and adapt them to automate operations.
• Continuously develop and maintain CTI’s Threat Intelligence Platform (TIP).
• Automate manual processes and optimize data processing/analysis pipelines for threat intelligence.
• Translate complex problems and requirements into workable designs and solutions.
• Provide ad-hoc support for scaling technical analysis/investigations via scripting and automated implementations.

What you'll need

• At least 4+ years of total experience in a cybersecurity field (e.g., Security Operations, Threat Intelligence, Security Engineering, DFIR).
• At least 1 year of experience building automation solutions using Python.
• Familiarity with threat intelligence or security-focused data analysis and/or network traffic analysis.
• Excellent written and verbal communication skills and experience working across multiple stakeholders.

Nice to have

• Preferred skills include knowledge of MITRE ATT&CK, STIX/TAXII, and the Diamond Model.
• Preferred skills include familiarity with Kubernetes, Docker, and containerization.
• Preferred skills include knowledge of vendor and open-source security research APIs.
• Preferred skills include familiarity with Python-based Machine Learning (ML) and AI libraries for data analysis.

Details

• Location: Mumbai, Maharashtra, India.