Threat Intelligence Analyst Engineer (Mid-Level)

Remote

Department: Product & Engineering

We’re looking for a mid-level Threat Intelligence Analyst Engineer to join our growing team. This is a hybrid role where you’ll combine hands-on threat analysis with product feedback and customer demo enablement.

You’ll help build realistic threat scenarios, collaborate closely with engineering to validate detection capabilities, and clearly communicate the platform’s power to both technical and non-technical audiences.

🛠 What You’ll Do

• Develop realistic threat simulation demo scenarios using IOCs, and adversary TTPs.
• Partner with sales engineers to deliver live demos and answer threat intel questions confidently.
• Collaborate with product & engineering to identify detection/enrichment gaps and validate new features.
• Prototype enrichment/detection logic and contribute intel insights to our threat graph.
• Act as the internal SME, sharing threat trends, TTP evolutions, and best practices across teams.

What You Bring

• 3–5 years of experience in threat intelligence, SOC, or incident response roles.
• Familiarity with OSINT (e.g., Abuse.ch, OTX, MISP), malware sandboxes (e.g., ANY.RUN, Hybrid Analysis), and IOC workflows.
• Strong grasp of MITRE ATT&CK and attacker TTPs.
• Excellent presentation and communication skills — comfortable speaking with both analysts and executives.
• Hands-on experience with SIEM/XDR platforms.
• Basic scripting/data manipulation skills (Python, JSON, etc.)

Nice to Have

• Experience in a cybersecurity product company or sales engineering.
• Familiarity with threat graph architectures or enrichment pipelines.
• Public speaking / demo experience (webinars, conference talks, etc.)

Interested or know someone great?

🔗 Apply or connect with us: farheen@thethreatlens.com