Cyber Threat Engineer - Automation & MITRE Intel Tools

247Hire; Vienna (VA); Presencial; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

247Hire is seeking a cybersecurity engineer to develop and maintain threat-hunting tools, scripts, and automated workflows. You will build repeatable data collection and enrichment processes, develop YARA and SIGMA rules, and translate analyst needs into scalable technical solutions.

Apply MITRE ATT&CK to detections and integrate threat intel sources into workflows. The role emphasizes QA, troubleshooting, and documentation, with a preference for advanced degrees and strong security

Formación

• Bachelor's degree preferred; relevant experience may be considered in lieu of degree.
• Master's degree strongly preferred; comparable advanced qualifications may be considered.
• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
• Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
• Experience with Python (3+ years), script-based automation, and YARA/SIGMA rule development.
• Practical experience applying MITRE ATT&CK to use cases.

Responsabilidades

• Develop and maintain tools, scripts, and automated workflows for threat-hunting operations.
• Build repeatable processes for collecting, enriching, transforming, and operationalizing threat data.
• Develop, test, and maintain YARA rules and supporting detection processes.
• Create Python-based utilities to reduce manual effort and improve scalability.
• Translate analyst needs into technical solutions and automated capabilities.
• Apply MITRE ATT&CK framework in tool development and detections.
• Integrate internal and external threat intelligence into workflows and tools.
• Validate quality and perform QA for tools, scripts, rules, and integrations.
• Troubleshoot and maintain pipelines, integrations, and automation.
• Maintain technical documentation and procedures for capabilities.

Conocimientos

Python

Threat-hunting

Security automation

YARA rule development

Sigma rule development

MITRE ATT&CK

Educación

Bachelor's degree in cybersecurity or related field

Master's degree preferred

Herramientas

YARA

Sigma rules

Python scripting

Automation workflows

Descripción del empleo

247Hire is seeking a cybersecurity engineer to develop and maintain threat-hunting tools, scripts, and automated workflows. You will build repeatable data collection and enrichment processes, develop YARA and SIGMA rules, and translate analyst needs into scalable technical solutions.

Apply MITRE ATT&CK to detections and integrate threat intel sources into workflows. The role emphasizes QA, troubleshooting, and documentation, with a preference for advanced degrees and strong security