The posting
Key Responsibilities:
- Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.
- Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
- Develop, test, document, and maintain YARA rules and supporting detection processes.
- Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.
- Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
- Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
- Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
- Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
- Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
- Maintain technical documentation and procedures needed to sustain developed capabilities.
Preferred Qualifications:
- Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
- Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
- Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
- Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
- Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
- Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
- Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.



