Threat Intelligence Engineer
On-siteBelfast, Northern Ireland, United Kingdom
Job Summary
Collect, process, and analyze threat data to detect and respond to threats targeting the enterprise and software supply chain. Draft threat actor profiles, campaign summaries, and indicator packages while ingesting, validating, and scoring indicators of compromise from commercial, open-source, and internal sources. Support integration of IOC pipelines with SIEM and EDR platforms like Sumo Logic and CrowdStrike Falcon/NG, applying confidence scoring and structured formats such as STIX 2.1. Monitor open-source package registries and CI/CD pipelines for adversarial activity including typosquatting and dependency confusion, then assist broader cybersecurity functions with alert triage and investigation enrichment.
Required Qualifications
- Typically at least two (2) years of experience in threat intelligence, security operations, threat hunting, or a closely related cybersecurity role
- demonstrated ability to solve moderately complex problems within established guidelines
- Working familiarity with the intelligence production lifecycle
- Working familiarity with threat actor profiling concepts
- Working familiarity with structured formats (e.g., STIX 2.1)
- ability to apply MITRE ATT&CK for basic TTP mapping
- Practical experience working within enterprise SIEM or EDR environments
- ability to run queries, review alerts, and support detection validation
- Conceptual understanding of adversarial techniques targeting open-source ecosystems
- ability to identify relevant indicators
- Strong written and verbal English communication skills
- ability to explain moderately complex threat information clearly to peers and adjacent teams
- comfortable escalating appropriately under moderate supervision
Desired Qualifications
- Bachelor's degree in computer science, information security, or a related field preferred
- entry-level security certified
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.