Cyware
Threat Intelligence Engineer (REMOTE)
United States, Remote
Sponsorship not specifiedDetected 1 day ago
PythonLLMsCybersecuritySOARIncident ResponseCustomer SuccessCollaboration
> stay_score
odds of building a lasting career here
16Unrated
Cap-exempt (no lottery)0
Sponsors this role0
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
No strong sponsorship signal in the public record yet. In the full product we resolve the exact legal entity and show its filing history with a confidence score — treat as unverified until then.
Lottery odds assume a STEM candidate.
Personalize to your clock →> community_outcomes
No reports yet — be the first to help the next applicant.
About the role
- Cyware's Virtual Cyber Fusion solutions make secure collaboration, information sharing, and enhanced threat visibility a reality for enterprises, sharing communities (ISAC/ISAO), MSSPs, and government agencies of all sizes and needs.
- Come join an exciting cybersecurity product startup that has closed its Series C funding round!
Responsibilities
- Map feeds to STIX and own the connector portfolio
- Design and maintain mappings from commercial, open-source, and community threat intelligence sources into STIX 2.1 objects, relationships, markings, patterning, and extensions while preserving semantic fidelity.
- Own connector lifecycle and quality-from onboarding new sources to detecting schema drift, validating mappings, and ensuring production reliability
- Work directly with feed, sandbox, DRP, and enrichment partners on integrations and joint use cases
- Build and improve an AI-assisted mapping workflow: infer schemas from sample payloads, propose candidate field-to-STIX mappings from documentation, and flag schema changes, while maintaining rigorous validation and human oversight
- Write threat intelligence use cases that drive product design, and pressure-test new capabilities against real analyst workflows.
- Partner with Product to shape intelligence workflows, including PIRs, ATT&CK-aligned investigations, threat modeling, prioritization, collaboration, and intelligence-driven automation
- Enable Solution Architects, Sales Engineers, and Customer Success Managers with the threat intelligence knowledge and use cases they need to win and deliver
- Python: you write real code. API clients, parsers, normalizers, validators. This role builds and debugs; it does not spec and hand off
Requirements
- 5+ years in threat intelligence as an analyst, engineer, or specialist, with hands-on experience on enterprise-scale security products
- Deep working knowledge of STIX/TAXII 2.1 objects, relationships, patterning, markings, and how to handle source data that does not fit the standard cleanly.
- You have implemented STIX mappings in production-not just studied the specification
- Hands-on experience with commercial and open-source threat feeds and enrichment sources (CrowdStrike, Mandiant, Recorded Future, Flashpoint, Intel 471, MISP, etc.), and with threat intelligence platforms
- You have used LLMs for real technical work: schema inference, data mapping, documentation parsing, code generation, and you know where they fail
- Comfortable in a customer-facing, cross-functional seat: you can defend a mapping decision to an engineer and explain the value of intelligence to a CISO
- Demonstrated ability to work successfully with colleagues across different time zones and geographies
Skills
- About Cyware
- Cyware's Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security teams.
- Your next opportunity starts here!
- More on Cyware:
- ( www.cyware.com )
- As a result, organizations can increase speed and accuracy while reducing costs and analyst burnout.
Compensation
- We offer competitive compensation packages.
Benefits
- We offer a comprehensive benefits package including time off, paid holidays, retirement plans, insurance coverage and much more.
Company info
- Serve as the technical threat intelligence expert for customers, prospects, and partners, translating complex intelligence concepts into practical business value
Visa & Work Authorization
- US Citizenship is a requirement of this position in accordance with 8 U
This listing is sourced directly from Cyware's careers page and normalized into a canonical job model.