Threat Intelligence Platform Engineer

Overview

Threat Intelligence Platform Engineer responsible for owning and operating the Vertex Synapse production platform that turns adversary intelligence into detections, blocks, and decisions.

What you'll do

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging.
• Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows.
• Partner with Security and Product to translate intelligence requirements into production capabilities.
• Prototype and implement features, fixes, and tooling for Intelligence Analysts and stakeholders.

What you'll need

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments.
• Software development experience in Python, Go, and/or Storm, including deploying production-quality code with CI/CD ownership after ship.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators and related intelligence data at scale.
• Track record of troubleshooting and restoring production systems and data quality issues, including root-cause fixes.
• Ability to translate cross-functional stakeholder needs into technical solutions within a security operations context.

Details

• Work mode: Remote (USA).