RemoteLeaf Logo
Log in Sign up

Senior Research Engineer, Threat Intelligence

1 day, 11 hours ago
United States
Full-time
Senior
Research Scientist
Software Development
AWS CI/CD Cybersecurity Go Node.js Python Splunk SQL TypeScript
Apply Now
SecurityScorecard

SecurityScorecard

SecurityScorecard is a cybersecurity company that provides a powerful AI-driven platform to identify and eliminate cyber risks across all attack surfaces.

IT Services
251-1K
Founded 2014
$292M raised
View All Jobs 24

Description

  • Own the path from research output to production-ready artifacts such as detection rules, distributed feeds, scoring inputs, and customer alerts.
  • Build and maintain STRIKE platform components across distribution servers, sandbox orchestration, OSINT ingestion, federated sharing endpoints, agent runtimes, and rules engines.
  • Turn research into shipped detection content including YARA, Sigma, STIX patterns, behavioral indicators, and distribution pipelines.
  • Build correlation pipelines that combine scan data, attack surface signals, vulnerability data, and adversary tracking into customer-facing intelligence.
  • Drive STIX 2.1 adoption as an output schema and TAXII 2.1 as a distribution standard.
  • Build automation for indicator enrichment, report drafting, corpus correlation, feed normalization, and sandbox triage.
  • Develop retrieval-grounded and schema-constrained workflows that support model-assisted and model-driven research operations.
  • Coordinate with engineering, measurement, and platform product teams to ensure research lands in product.
  • Translate between researchers, product managers, platform engineers, and occasionally customers, journalists, or executives.

Requirements

  • Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent strong public work as a self-taught practitioner.
  • 5 to 8 years in a hands-on engineering role with meaningful exposure to threat intelligence, security research, or detection engineering.
  • Prior experience building production systems that consume or emit threat intelligence data.
  • Production-level Python and TypeScript/Node experience.
  • Experience with relational and cache data stores and at least one streaming or batch data platform.
  • Experience with cloud infrastructure, containers, and CI/CD pipelines; AWS preferred.
  • Working knowledge of STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CK.
  • Hands-on experience with YARA, Sigma, and STIX Patterning.
  • Experience shipping production systems that use language models, including retrieval over a real corpus, structured output validation, and eval harnesses.
  • Strong judgment about where models are and are not appropriate, including awareness of failures in recency, long-tail facts, numerical reasoning, and adversarial input or prompt injection.
  • Ability to reason about cost-per-task and choose smaller, tightly scaffolded models when appropriate.
  • A bridge mindset that combines code shipping with an understanding of research workflows.
  • Preferred: experience with policy-as-code or expression-language engines such as CEL or OPA.
  • Preferred: published or co-authored security research.
  • Preferred: large-scale telemetry experience such as Splunk, Kinesis, or NetFlow.
  • Preferred: contribution or maintenance on open-source threat intel projects such as MISP, OpenCTI, Sigma, STIX, or ATT&CK.
  • Preferred: familiarity with quantitative risk frameworks such as FAIR.
  • Preferred: production-level Golang experience.

Benefits

  • Competitive salary with stock options and equity.
  • Estimated total compensation of $140,000 to $180,000 base plus bonus.
  • Annual performance-based incentive compensation awards.
  • Health benefits.
  • Unlimited PTO.
  • Parental leave.
  • Tuition reimbursement.
  • Equal employment opportunity and reasonable accommodation support.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Venice.ai

Engineering Lead, Inference Optimization

Venice.ai

Venice AI is hiring an Inference Optimization leader to drive technical strategy and scale privacy-focused LLM inference performance across its GPU infrastructure.

United States Full-time Lead Engineering Manager Research Scientist
$270k-$330k
C++ Go Python Rust
3 days, 10 hours ago
VivoSense

Senior Scientific Platform Engineer

VivoSense 11-50 Professional Services

VivoSense is hiring a Senior Scientific Platform Engineer to transform scientific and digital health workflows into scalable, production-ready platform capabilities for clinical studies and customer deliverables.

United States Full-time Senior Research Scientist Software Engineer
$130k-$160k
AWS C# CI/CD .NET Python R Serverless
3 days, 11 hours ago
P

Associate Research Scientist, Real World Evidence

Precision AQ 1001-5000 Business Consulting and Services

Precision AQ is hiring a fully remote Associate Research Scientist on its Real-World Evidence team to support real-world studies in the pharmaceutical and biotech space.

United States Full-time Entry Level Research Scientist
$66k-$94k
Python R SQL
5 days, 11 hours ago
Pinterest

Sr. Staff Quantitative Product Researcher

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Sr. Staff Quantitative Product Researcher to lead user-centered measurement across the consumer experience and help shape how the company evaluates the Pinner experience.

United States Full-time Lead Data Scientist Research Scientist
$164k-$337k
Machine Learning Python R SQL
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers