Cyber Threat Intelligence Engineer

Altus Consulting Corporation; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Altus Consulting Corporation is seeking a Cyber Threat Intelligence Engineer to support the development, operation, and integration of enterprise CTI capabilities. You will work across cyber defense teams to transform threat intelligence into actionable detection, threat hunting, prevention, and incident response capabilities.

Responsibilities include maintaining the CTI platform, data feeds, ETL pipelines, access controls, and integration with SIEM, SOAR, IDS/IPS, EDR, and NDR.

Qualifications

• Experience in data engineering, DevSecOps, or SOC operations.
• Experience building threat intelligence data repositories or platforms.
• Experience developing automated ETL/data pipelines for CTI data.
• Proficiency with Bash and/or PowerShell automation in Linux and Windows.
• Experience with Splunk or Elastic including CTI integrations.
• Experience onboarding and integrating data using platform add-ons and lookup tables.
• Ability to build CTI dashboards and configure correlation searches.
• Strong communication and leadership briefing skills.
• Strong technical documentation skills.

Responsibilities

• Establish, operate, and maintain a Cyber Threat Intelligence platform.
• Document a catalog of CTI data feeds for investigations, detections, and defense functions.
• Build, operate, and maintain automated ETL and data pipelines for CTI data ingestion.
• Develop processes for CTI feed maintenance and rapid onboarding of new data sources.
• Develop access control policies to restrict CTI data to authorized users.
• Integrate CTI data with SIEM, SOAR, IDS/IPS, EDR, and NDR capabilities.
• Develop and maintain CTI dashboards, queries, and correlation searches for threat hunting.
• Use Bash and PowerShell to automate processes across Linux and Windows environments.
• Support CTI integration with data platforms like Splunk or Elastic.
• Update cyber defense playbooks and SOPs to include CTI data and automation.
• Assist in establishing CTI practices across teams and training.
• Support AI/SI capabilities within SOC workflows.
• Collaborate with technical teams and communicate with stakeholders.

Skills

Data engineering

DevSecOps

SOC operations

Threat intelligence

ETL pipelines

Bash/PowerShell

Cross-team collaboration

Technical documentation

Tools

Splunk

Elastic

Job description

Cyber Threat Intelligence Engineer

Employment Type: Full Time
Directorate: Cyber Security Engineering

Altus Consulting is seeking a skilled Cyber Threat Intelligence Engineer to support the development, operation, and integration of enterprise Cyber Threat Intelligence (CTI) capabilities. You will work across cyber defense teams to transform threat intelligence into actionable detection, threat hunting, prevention, and incident response capabilities.

Responsibilities

• Establish, operate, and maintain a Cyber Threat Intelligence platform.
• Establish and document a catalog of classified and commercial CTI data feeds supporting investigations, detections, prevention, and other cyber defense functions.
• Build, operate, and maintain automated ETL and data pipelines for streaming CTI data and scheduled ingestion.
• Develop and document processes for reliable CTI feed maintenance and rapid onboarding of new data sources.
• Develop access control policies to ensure CTI data is available only to authorized users with the appropriate need to know.
• Integrate CTI data with enterprise security technologies, including SIEM, SOAR, IDS/IPS, EDR, and NDR capabilities.
• Develop and maintain CTI dashboards, queries, lookup tables, and correlation searches supporting threat hunting and cyber defense operations.
• Use Bash and/or PowerShell to automate processes across Linux and Windows environments.
• Support CTI integration with data platforms such as Splunk or Elastic.
• Update cyber defense playbooks and standard operating procedures to incorporate CTI data and security automation.
• Help establish consistent CTI practices across cyber defense teams through technical integration, procedures, documentation, and training.
• Support the effective application of Artificial Intelligence / Super Intelligence (AI/SI) capabilities within day-to-day SOC workflows.
• Collaborate across technical teams and communicate effectively with stakeholders and leadership.

Qualifications

• Demonstrated experience in data engineering, DevSecOps, SOC operations, or a similar technical role.
• Demonstrated experience building, operating, or maintaining threat intelligence data repositories or platforms.
• Demonstrated experience developing automated ETL/data pipelines for streaming CTI data and scheduled ingestion.
• Proficiency with Bash and/or PowerShell automation in Linux and Windows environments.
• Strong experience with data platforms such as Splunk or Elastic, including developing or modifying queries, dashboards, and CTI integrations.
• Experience onboarding and integrating data using platform add-ons and lookup tables.
• Ability to build CTI dashboards and configure correlation searches for threat hunting.
• Strong communication skills, including cross-team collaboration and leadership briefings.
• Strong technical documentation skills.

Why Join Altus?

At Altus, you'll work alongside highly skilled cybersecurity professionals supporting critical national security missions. We foster a collaborative environment focused on innovation, continuous learning, professional growth, and operational excellence. If you are passionate about cyber defense, threat intelligence, and protecting mission-critical systems.

The information provided in this job description is accurate and truthful to the best of our knowledge. However, it is not intended to be a contract, and we reserve the right to modify the job description at any time.

Altus Consulting is dedicated to diversity and inclusion, building a work environment where everyone feels respected and valued. We firmly believe in equal opportunity, guaranteeing fair and unbiased treatment for all individuals in all aspects of employment, regardless of race, color, religion, national origin, gender, sexual orientation, gender identity, pregnancy, childbirth or related medical conditions, age, protected veteran status, or disability status. We oppose discrimination in any form, and our commitment is evident in every interaction.