Cyber Threat Engineer

INSPYR Solutions; Merrifield (VA); Hybrid; USD 83,000 - 96,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Competitive pay

401(k) retirement plan

Job summary

INSPYR Solutions in Vienna, VA / Pensacola, FL hybrid is seeking a Cyber Threat Engineer to support the TIER team by developing and maintaining tools and automation for threat hunting and intelligence operations.

The role focuses on threat intel ingestion, rule development (YARA/SIGMA), MITRE ATT&CK alignment, and scalable scripting in Python, with a 6-month contract and US work eligibility.

Qualifications

• Bachelor's degree or higher in a technical field; relevant experience considered in lieu of a degree.
• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
• Direct experience supporting Cyber Threat Intelligence or threat-hunting function.
• Experience with Python, YARA, and SIGMA rule development.
• Knowledge of MITRE ATT&CK framework applied to use cases.

Responsibilities

• Develop and maintain tools, scripts, and automated workflows for threat-hunting and intelligence operations.
• Build repeatable processes for ingesting, enrich ing, transforming, and operationalizing threat data.
• Develop, test, and maintain YARA rules and detection processes.
• Create Python-based utilities and automation to improve workflow scalability.
• Translate analyst requirements into technical solutions, integrations, and reusable capabilities.
• Apply MITRE ATT&CK framework to tool development and detections.
• Integrate internal and external threat intelligence sources into workflows.
• Validate, QA, and maintain tools, scripts, and automation before use.
• Troubleshoot and maintain data pipelines and documentation.

Skills

Cybersecurity engineering

Automation

Threat hunting

Python scripting

MITRE ATT&CK

Communication

Education

Bachelor's degree in cybersecurity/CS/IT/engineering

Master's degree in cybersecurity/ information assurance/CS

Tools

YARA

SIGMA

Python

Job description

Title: Cyber Threat Engineer
Location: Vienna, VA OR Pensacola, FL (HYBRID)
Duration: Initial 6-month contract with possible extensions
Compensation: $60/hour - $70/hour
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Cyber Threat Engineer

We are looking for a Cyber Threat Engineer to support the core functions of the Threat Intelligence and Emerging Risk (TIER) team. This position will provide dedicated engineering capacity to develop, automate, integrate, and maintain the tools and processes TIER analysts use for threat hunting and operationalizing threat intelligence.
The role will support threat intelligence ingestion and enrichment workflows, automated data processing, YARA and SIGMA rule development, technical integrations, and reusable threat-hunting capabilities. Dedicated engineering support will reduce manual effort, improve the scalability and consistency of TIER operations, and allow analysts to focus more directly on threat intelligence and emerging-risk activities.

Position Summary

The Cyber Threat Engineer is a mid-level cybersecurity engineering role responsible for developing and maintaining the tools, automation, integrations, and technical processes that support TIER threat intelligence and threat-hunting activities. Working from TIER-defined requirements, the engineer will independently design, test, document, and maintain reusable technical solutions. The position enables threat analysis and hunting through engineering rather than serving as the primary threat analyst.

Key Responsibilities

• Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.
• Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
• Develop, test, document, and maintain YARA rules and supporting detection processes.
• Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.
• Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
• Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
• Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
• Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
• Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
• Maintain technical documentation and procedures needed to sustain developed capabilities.

Preferred Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
• Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
• Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
• Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
• Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
• Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.

Key Skills

• Strong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.
• Ability to translate analyst requirements into reliable, reusable, and maintainable technical solutions.
• Ability to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.
• Understanding of threat intelligence and threat-hunting concepts and workflows.
• Effective communication and collaboration with threat analysts and defensive cybersecurity partners.
• Strong attention to quality, repeatability, maintainability, and documentation.

Expected Contribution

This position will provide dedicated engineering support for TIER's core threat intelligence and threat-hunting functions rather than primary ownership of threat analysis. The engineer will convert analyst requirements into scalable tools, rules, integrations, and automated processes that improve operational efficiency and consistency. This capacity will reduce the technical workload carried by TIER analysts and support continued expansion of the team's threat-hunting capabilities.

Our benefits package includes

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• …and much more!

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.