Threat Intelligence Automation Engineer

NCC Group; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

NCC Group in London is seeking a Developer for its Threat Intelligence engineering team to design and maintain extensions, automations, and tooling for core platforms. You will build, deploy, secure, monitor, and integrate Python-based components and CLI tools, connecting back-end systems to remove data silos and enable analysts to work more efficiently.

You will collaborate with analysts, engineers, and other developers in a fast-paced DevOps environment, applying cloud concepts,

Qualifications

• Proficiency in Python and Bash.
• DevOps experience in a cloud environment.
• Familiarity with threat intelligence tooling and standards.
• Data transformation and backend systems experience.
• Exposure to open-source software.

Responsibilities

• Develop, deploy, secure, monitor, and maintain Threat Intelligence platform extensions and tooling.
• Build Python application extensions and CLI tooling.
• Link diverse backend systems to break down siloed data repositories.
• Bridge the gap between developers, engineers, and analysts with automation.
• Provide robust support for automatable processes and identify automation opportunities.

Skills

Python

Bash

DevOps

Cloud computing

Data transformation

Threat intel tooling

STIX2/TAXII2

OpenCTI/MIS

Automation

Problem solving

Tools

Docker

Kubernetes

AWS

CLI tooling

Python modules

Open-source software

Job description

NCC Group in London is seeking a Developer for its Threat Intelligence engineering team to design and maintain extensions, automations, and tooling for core platforms. You will build, deploy, secure, monitor, and integrate Python-based components and CLI tools, connecting back-end systems to remove data silos and enable analysts to work more efficiently.

You will collaborate with analysts, engineers, and other developers in a fast-paced DevOps environment, applying cloud concepts,