Hybrid Cyber Threat Engineer: Automation & Intel

System One, Inc.; Merrifield (VA); Híbrido; USD 96.000 - 110.000; A tiempo parcial

Descripción de la vacante

System One, Inc. seeks a Cyber Threat Engineer for a hybrid Vienna, VA contract engagement. The role focuses on building and maintaining tools, automation, and threat-hunting workflows to operationalize threat intelligence and MITRE ATT&CK-based detections.

You will develop Python utilities, craft YARA and SIGMA rules, and translate analyst needs into repeatable, reliable security solutions while collaborating with threat analysts and defense partners. Salary is 70-80 USD per hour on W2.

Formación

• Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
• Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
• Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
• Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
• Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
• Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
• Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.
• Strong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.
• Ability to translate analyst requirements into reliable, reusable, and maintainable technical solutions.
• Ability to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.
• Understanding of threat intelligence and threat-hunting concepts and workflows.
• Effective communication and collaboration with threat analysts and defensive cybersecurity partners.
• Strong attention to quality, repeatability, maintainability, and documentation.

Responsabilidades

• Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.
• Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
• Develop, test, document, and maintain YARA rules and supporting detection processes.
• Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.
• Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
• Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
• Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
• Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
• Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
• Maintain technical documentation and procedures needed to sustain developed capabilities.

Conocimientos

Python scripting

Threat hunting concepts

Cybersecurity engineering

Automation and tooling

Communication

Educación

Bachelor's degree in cybersecurity, CS, IT, information systems, or related field

Master's degree in cybersecurity or related technical discipline

Herramientas

YARA rules

SIGMA rules

Descripción del empleo

System One, Inc. seeks a Cyber Threat Engineer for a hybrid Vienna, VA contract engagement. The role focuses on building and maintaining tools, automation, and threat-hunting workflows to operationalize threat intelligence and MITRE ATT&CK-based detections.

You will develop Python utilities, craft YARA and SIGMA rules, and translate analyst needs into repeatable, reliable security solutions while collaborating with threat analysts and defense partners. Salary is 70-80 USD per hour on W2.