Senior Research Engineer, Threat Intelligence

🕒 July 1

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $140k - $150k / year

⏰ Full Time

🟠 Senior

📚 Research Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SecurityScorecard

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2013

💼 Consulting

🏥 Healthcare

🛡️ Insurance

💰 $180M Series E on 2021-03

Consulting • Healthcare • Insurance

SecurityScorecard is a company that focuses on cybersecurity and risk management. It provides solutions for supply chain detection and response, third-party cyber risk management, and external attack surface management. By leveraging AI and security ratings, SecurityScorecard helps organizations improve their cybersecurity postures and manage risks effectively. The company's platform allows for monitoring and remediation of vulnerabilities, collaboration with vendors, and compliance with regulatory mandates. SecurityScorecard serves a diverse range of industries, including public sector, technology, healthcare, financial services, and more. Its comprehensive suite of tools and services, such as Security Ratings and MAX, empower organizations to proactively manage cyber risks and enhance their overall security structures.

📋 Description

• Own the path from research output to production-ready artifact: a detection rule, a distributed feed, a scoring input, or a customer alert. • Build and maintain STRIKE platform components across multiple services and runtimes, including distribution servers, sandbox orchestration, OSINT ingestion, federated sharing endpoints, agent runtimes, and rules engines that operate over standards-anchored predicates. • Turn research into shipped detection content: YARA, Sigma, STIX patterns, behavioral indicators, and the pipelines that distribute them. • Drive STIX 2.1 adoption as a unified output schema and TAXII 2.1 as a distribution standard. • Build the automation that removes commodity overhead from research work: indicator enrichment, report drafting, corpus correlation, feed normalization, and sandbox triage. • Coordinate with engineering, measurement, and platform product teams so research actually lands in product.

🎯 Requirements

• Bachelor's or Master's in Computer Science, Cybersecurity, or a related technical field • 5 to 8 years in a hands-on engineering role with meaningful exposure to threat intelligence, security research, or detection engineering • Prior experience building production systems that consume or emit threat intel data is required. • Python and TypeScript/Node at a production level • Relational and cache data stores, plus at least one streaming or batch data platform • Cloud infrastructure (AWS preferred), containers, and CI/CD pipelines • Working knowledge of STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CK, and how they work together in practice • Hands-on experience with YARA, Sigma, and STIX Patterning • Comfortable reading malware analysis output, parsing adversary infrastructure data, and writing detection logic that holds up under production load.

🏖️ Benefits

• Specific to each country, we offer a competitive salary • stock options • Health benefits • unlimited PTO • parental leave • tuition reimbursements