Counter-Threat Intelligence Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cambium Learning Group

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2009

📚 Education

🤖 Artificial Intelligence

Education • Artificial Intelligence

Cambium Learning Group is a company focused on providing essential educational solutions through a family of companies. They create experiences designed to help educators and students succeed by leveraging technology, including artificial intelligence and machine learning. Cambium Learning Group's brands are among the most respected in the edtech sector, supporting meaningful work and innovation in education. Their commitment is reflected in their dedication to making every learning moment valuable and impactful.

📋 Description

• Collect, analyze, and operationalize strategic, tactical, and operational threat intelligence from trusted internal and external sources • Perform authorized adversary-focused research and ethical hacking to validate exposures, identify attack paths, and recommend defensive improvements across endpoints, cloud services, applications, identity platforms, networks, and third-party integrations • Partner with Security Operations to create, tune, and validate detections, playbooks, threat hunting hypotheses, and response workflows across data log pipelines, SIEM, XDR, EDR, vulnerability management, and related security tools • Support Continuous Threat Exposure Management by scoping assets, discovering exposures, prioritizing findings by business risk, validating exploitability, and coordinating remediation activities • Produce actionable threat intelligence reports, briefings, and technical recommendations for security analysts and senior leadership • Contribute to incident response investigations through threat-context enrichment, malware and phishing analysis, infrastructure research, attack timeline reconstruction, and lessons learned • Maintain awareness of threat actor tradecraft, vulnerability exploitation trends, cloud and identity attacks, education-sector threats, data protection risks, and attacker use of automation and artificial intelligence • Recommend defensive priorities, detection improvements, risk acceptance considerations, and escalation paths aligned with company policies, standards, and governance expectations • Collaborate with Security Operations, IT Operations, Risk, Legal Compliance, Product, Engineering, and business stakeholders to reduce attack surface and measurable risk

🎯 Requirements

• 5+ years of progressive cybersecurity experience • At least 2 years in threat intelligence, ethical hacking, penetration testing, detection engineering, security operations, incident response, vulnerability management, or a closely related role • Certified Ethical Hacker (CEH) certification highly preferred; similar certifications or equivalent practical experience may be considered, including OSCP, GPEN, CompTIA PenTest+, CPENT, eJPT, GCTI, and CTIA • Working knowledge of the cyber kill chain, MITRE ATT&CK, common attack techniques, malware and phishing behaviors, cloud and identity threats, vulnerability exploitation, attacker infrastructure, and defensive countermeasures • Hands-on experience with SIEM, XDR/EDR, vulnerability scanners, threat intelligence platforms, cloud security tools, identity logs, endpoint telemetry, network telemetry, and ticketing/workflow platforms • Ability to write clear threat intelligence summaries, detection recommendations, executive briefings, remediation guidance, and technical documentation • Experience conducting authorized security testing, adversary emulation, attack surface analysis, detection validation, or threat hunts • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred; equivalent professional experience and certifications may be considered • High judgment, strong ethics, discretion with sensitive information, collaborative communication style, and commitment to protecting confidential, proprietary, student, customer, associate, and business data • Preferred: experience in education technology, SaaS, cloud-first, remote-first, or regulated environments • Preferred: experience building threat hunting content, Sigma/YARA rules, KQL/SPL queries, detection-as-code, or automation for enrichment and triage • Familiarity with Python, PowerShell, Bash, APIs, or SOAR-style workflows • Working knowledge of data privacy, secure software development, third-party risk, ISO 27001, SOC 2, NIST CSF, or NIST SP 800-series guidance • Reliable cable or fiber-optic broadband internet connection with minimum speeds of 10 Mbps download and 5 Mbps upload if working remotely • Ability to actively participate in video-based interviews and ongoing virtual meetings with camera on • Must not use note-taking tools, reference materials, or AI-powered tools during interviews or selection activities without prior written approval, subject to accommodation exceptions

🏖️ Benefits

• Remote-first work environment with flexibility and trust to balance work with life • Home or remote office setup cost reimbursement • Reliable internet requirement supported for remote work (minimum 10 Mbps download and 5 Mbps upload)