Software Engineer – Cyber Threat Intelligence

MP Systems; Dublin; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

MBP Systems is an Irish deep-tech SME building a Cyber Threat Intelligence platform that ingests, enriches and correlates threat data at scale. This early-engineer role offers direct influence on architecture and product, including multi-tenant cloud infra on AWS and integration with CTI standards.

You will design ingestion pipelines, apply ML/LLM for threat detection, and own features end-to-end from schema to CI/CD, collaborating with researchers and international partners.

Qualifications

• Strong software engineering background with production AWS experience.
• Solid PostgreSQL data engineering and high-volume ingestion expertise.
• Understanding of cybersecurity concepts (threat intel, IOCs, detection).
• Experience with CTI platforms or standards (MISP, OpenCTI, STIX/TAXII).
• Practical ML/LLM API experience in production is a plus.
• Willingness to ship and iterate in early-stage product environment.
• Degree in Computer Science or related field, or equivalent experience.

Responsibilities

• Design and build the core platform: ingestion pipelines for threat feeds and telemetry, enrichment, correlation and scoring.
• Work with CTI standards and tooling (STIX/TAXII, MISP, OpenCTI ecosystem) and integrate with SIEM/SOAR workflows.
• Build and scale multi-tenant cloud infrastructure on AWS (ECS Fargate, RDS PostgreSQL, ElastiCache, S3, SQS, EventBridge).
• Apply AI/ML for threat detection, anomaly detection and intelligence enrichment, including LLM-based analysis via AWS Bedrock.
• Own features end to end: schema design, backend, infrastructure, CI/CD (GitHub Actions), monitoring.
• Collaborate with our research team and international project partners, feeding research outcomes into the product.

Skills

AWS

PostgreSQL

Cybersecurity concepts

CTI platforms/standards

ML/LLM APIs

Software engineering

Education

Computer Science or related field

Tools

MISP

OpenCTI

STIX/TAXII

Job description

MBP Systems is an Irish deep-tech SME and UCD spin-out building products at the intersection of security research and industry. We are developing a Cyber Threat Intelligence platform that collects, enriches and correlates threat data at scale, turning raw feeds and telemetry into actionable intelligence. The work builds on our ongoing European research in AI-driven network security. We're at an early stage of productisation — this is an early-engineer role with direct influence on architecture and product.

What you'll do:

• Design and build the core platform: ingestion pipelines for threat feeds and telemetry, enrichment, correlation and scoring
• Work with CTI standards and tooling (STIX/TAXII, MISP, OpenCTI ecosystem) and integrate with SIEM/SOAR workflows
• Build and scale multi-tenant cloud infrastructure on AWS (ECS Fargate, RDS PostgreSQL, ElastiCache, S3, SQS, EventBridge)
• Apply AI/ML for threat detection, anomaly detection and intelligence enrichment, including LLM-based analysis via AWS Bedrock
• Own features end to end: schema design, backend, infrastructure, CI/CD (GitHub Actions), monitoring
• Collaborate with our research team and international project partners, feeding research outcomes into the product

What we're looking for:

• Strong software engineering background with production AWS experience
• Solid data engineering and database skills (PostgreSQL): schema design, high-volume ingestion, query performance
• Understanding of cybersecurity concepts — threat intelligence, IOCs, detection, network security
• Experience with CTI platforms or standards (MISP, OpenCTI, STIX/TAXII) a strong plus
• Practical experience with applied ML or LLM APIs in production is a plus
• Comfort with early-stage ambiguity: you'd rather ship and iterate than wait for a spec
• Degree in Computer Science or related field, or equivalent experience