Cyber Threat Engineer

System One, Inc.; Pensacola (FL); Hybrid; USD 83,000 - 124,000; Full time

Job summary

System One, Inc. is seeking a Cyber Threat Engineer in Pensacola, FL for a contract role with a hybrid work model.

You will develop tools and automated workflows to support tiered threat-hunting and intelligence operations, build repeatable data collection and enrichment processes, and create Python utilities to scale defenses. The role requires experience with Python, YARA, SIGMA, and applying MITRE ATT&CK to real-world use cases, plus strong problem-solving and collaboration with threat

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
• Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
• Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
• Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
• Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
• Security+ or equivalent certifications preferred, but not required.
• Strong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.
• Ability to translate analyst requirements into reliable, reusable, and maintainable technical solutions.
• Ability to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.
• Understanding of threat intelligence and threat-hunting concepts and workflows.
• Effective communication and collaboration with threat analysts and defensive cybersecurity partners.
• Strong attention to quality, repeatability, maintainability, and documentation.

Responsibilities

• Develop and maintain tools, scripts, and automated workflows for TIER threat-hunting and intelligence operations.
• Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
• Develop, test, document, and maintain YARA rules and supporting detection processes.
• Create Python-based utilities and script automation to reduce manual effort and improve workflow scalability.
• Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
• Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
• Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
• Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
• Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
• Maintain technical documentation and procedures needed to sustain developed capabilities.

Skills

Threat hunting

Cybersecurity engineering

Automation

Problem solving

Communication

Education

Bachelor's degree in cybersecurity or related field

Master's degree in cybersecurity or comparable field

Relevant experience in lieu of degree

Tools

Python

YARA

SIGMA

Automation scripts

Job description

Job Title: Cyber Threat Engineer

Location: Pensacola, Florida

Type: Contract

Work Model: Hybrid

Responsibilities

• Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.

• Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.

• Develop, test, document, and maintain YARA rules and supporting detection processes.

• Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.

• Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.

• Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.

• Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.

• Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.

• Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.

• Maintain technical documentation and procedures needed to sustain developed capabilities.

Requirements

• Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.

• Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.

• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.

• Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.

• Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.

• Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.

• Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.

• Strong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.

• Ability to translate analyst requirements into reliable, reusable, and maintainable technical solutions.

• Ability to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.

• Understanding of threat intelligence and threat-hunting concepts and workflows.

• Effective communication and collaboration with threat analysts and defensive cybersecurity partners.

• Strong attention to quality, repeatability, maintainability, and documentation.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.