RemoteLeaf Logo
Log in Sign up

Senior Research Engineer, Threat Intelligence

1 month, 2 weeks ago
United States
Full-time
Senior
Research Scientist
Software Development
AWS CI/CD Cybersecurity Go Node.js Python Splunk SQL TypeScript
Apply Now
SecurityScorecard

SecurityScorecard

SecurityScorecard is a cybersecurity company that provides a powerful AI-driven platform to identify and eliminate cyber risks across all attack surfaces.

IT Services
251-1K
Founded 2014
$292M raised
View All Jobs 29

Description

  • Own the path from research output to production-ready artifacts such as detection rules, distributed feeds, scoring inputs, and customer alerts.
  • Build and maintain STRIKE platform components across distribution servers, sandbox orchestration, OSINT ingestion, federated sharing endpoints, agent runtimes, and rules engines.
  • Turn research into shipped detection content including YARA, Sigma, STIX patterns, behavioral indicators, and delivery pipelines.
  • Build correlation pipelines that connect scan data, attack surface signals, vulnerability data, and adversary tracking into customer-facing intelligence.
  • Drive adoption of STIX 2.1 as the unified output schema and TAXII 2.1 as the distribution standard.
  • Define, govern, and extend schemas that remain reliable for downstream teams.
  • Build automation for indicator enrichment, report drafting, corpus correlation, feed normalization, and sandbox triage.
  • Develop safe, production-grade workflows for model-assisted and model-driven research, including retrieval, schema-constrained output, eval harnesses, and logging.
  • Coordinate with engineering, measurement, and platform product teams to ensure research work lands in product.
  • Serve as the engineering bridge between researchers, product managers, platform engineers, and sometimes customers, journalists, or executives.

Requirements

  • Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent self-taught experience with strong public work.
  • 5 to 8 years of hands-on engineering experience with meaningful exposure to threat intelligence, security research, or detection engineering.
  • Prior experience building production systems that consume or emit threat intelligence data is required.
  • Production-level experience with Python and TypeScript/Node.
  • Experience with relational and cache data stores, plus at least one streaming or batch data platform.
  • Experience with cloud infrastructure, preferably AWS, containers, and CI/CD pipelines.
  • Working knowledge of STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CK.
  • Hands-on experience with YARA, Sigma, and STIX Patterning.
  • Experience reading malware analysis output, parsing adversary infrastructure data, and writing detection logic that performs in production.
  • Experience shipping production language-model systems with retrieval over a real corpus, structured output validation, eval harnesses, and awareness of model failure modes.
  • Strong judgment about when to use models versus simpler approaches such as regex or SQL.
  • Bonus: experience with policy-as-code or expression-language engines such as CEL or OPA.
  • Bonus: published or co-authored security research on campaigns, vulnerabilities, or adversary tracking.
  • Bonus: large-scale telemetry experience with tools such as Splunk, Kinesis, NetFlow, or equivalent.
  • Bonus: contributor or maintainer on open-source threat intel projects such as MISP, OpenCTI, Sigma, STIX, or ATT&CK.
  • Bonus: familiarity with quantitative risk frameworks such as FAIR.
  • Bonus: familiarity with Golang at a production level.

Benefits

  • Competitive salary with estimated total compensation of $140,000 to $150,000 base plus bonus.
  • Stock options and potential equity awards.
  • Health benefits.
  • Unlimited PTO.
  • Parental leave.
  • Tuition reimbursement.
  • Annual performance-based incentive compensation awards.
  • Flexible benefits that vary by country.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

P

Associate Research Scientist, Real World Evidence

Precision AQ 1001-5000 Business Consulting and Services

Precision AQ is hiring a fully remote Associate Research Scientist on its Real-World Evidence team to support real-world studies in the pharmaceutical and biotech space.

United States Full-time Entry Level Research Scientist
$66k-$94k
Python R SQL
1 hour, 8 minutes ago
Pinterest

Sr. Staff Quantitative Product Researcher

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Sr. Staff Quantitative Product Researcher to lead user-centered measurement across the consumer experience and help shape how the company evaluates the Pinner experience.

United States Full-time Lead Data Scientist Research Scientist
$164k-$337k
Machine Learning Python R SQL
2 days, 1 hour ago
Natera

Lead Bioinformatician (cfDNA Algorithms and Pipelines)

Natera 1K-5K Pharmaceuticals

Natera is hiring a Lead Bioinformatician to develop and support the computational methods behind diagnostic sequencing assays for women’s and organ health.

United States Full-time Senior Data Scientist Research Scientist
$131k-$164k
Prototyping Python
6 days ago
Natera

Associate Director of Bioinformatics (Women's Health and Organ Health)

Natera 1K-5K Pharmaceuticals

Natera is hiring an Associate Director to lead bioinformatics research and assay-development work for women’s health and organ health diagnostics, with responsibility for guiding a team and transitioning new methods into production.

United States Full-time Lead Data Scientist Research Scientist
$167k-$202k
AWS CI/CD Docker GCP Git Java Kubernetes Machine Learning Python R Shell Scripting
6 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers