CTI Platform Engineer | Threat Hunt & SIEM Automation

Altus Consulting Corporation; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Altus Consulting Corporation is seeking a Cyber Threat Intelligence Engineer to support the development, operation, and integration of enterprise CTI capabilities. You will work across cyber defense teams to transform threat intelligence into actionable detection, threat hunting, prevention, and incident response capabilities.

Responsibilities include maintaining the CTI platform, data feeds, ETL pipelines, access controls, and integration with SIEM, SOAR, IDS/IPS, EDR, and NDR.

Qualifications

• Experience in data engineering, DevSecOps, or SOC operations.
• Experience building threat intelligence data repositories or platforms.
• Experience developing automated ETL/data pipelines for CTI data.
• Proficiency with Bash and/or PowerShell automation in Linux and Windows.
• Experience with Splunk or Elastic including CTI integrations.
• Experience onboarding and integrating data using platform add-ons and lookup tables.
• Ability to build CTI dashboards and configure correlation searches.
• Strong communication and leadership briefing skills.
• Strong technical documentation skills.

Responsibilities

• Establish, operate, and maintain a Cyber Threat Intelligence platform.
• Document a catalog of CTI data feeds for investigations, detections, and defense functions.
• Build, operate, and maintain automated ETL and data pipelines for CTI data ingestion.
• Develop processes for CTI feed maintenance and rapid onboarding of new data sources.
• Develop access control policies to restrict CTI data to authorized users.
• Integrate CTI data with SIEM, SOAR, IDS/IPS, EDR, and NDR capabilities.
• Develop and maintain CTI dashboards, queries, and correlation searches for threat hunting.
• Use Bash and PowerShell to automate processes across Linux and Windows environments.
• Support CTI integration with data platforms like Splunk or Elastic.
• Update cyber defense playbooks and SOPs to include CTI data and automation.
• Assist in establishing CTI practices across teams and training.
• Support AI/SI capabilities within SOC workflows.
• Collaborate with technical teams and communicate with stakeholders.

Skills

Data engineering

DevSecOps

SOC operations

Threat intelligence

ETL pipelines

Bash/PowerShell

Cross-team collaboration

Technical documentation

Tools

Splunk

Elastic

Job description

Altus Consulting Corporation is seeking a Cyber Threat Intelligence Engineer to support the development, operation, and integration of enterprise CTI capabilities. You will work across cyber defense teams to transform threat intelligence into actionable detection, threat hunting, prevention, and incident response capabilities.

Responsibilities include maintaining the CTI platform, data feeds, ETL pipelines, access controls, and integration with SIEM, SOAR, IDS/IPS, EDR, and NDR.