Lead Cyber Threat Intelligence Engineer

Genuine Parts Company; Alabama; On-site; USD 120,000 - 180,000; Full time

Job summary

Genuine Parts Company seeks a Cyber Threat Intelligence Engineer Lead to provide technical leadership for CTI collection, analysis, enrichment, and operationalization, translating intelligence into actionable defensive measures.

The role partners closely with Security Operations on Incident Response, Threat Hunting, security monitoring, and exposure management, while mentoring CTI engineers and analysts to maintain high standards of intelligence tradecraft.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, intelligence studies, or a related field.
• 8–12 years of related cybersecurity experience, including CTI, threat hunting, incident response, detection engineering, or security operations.
• Proficient in MITRE ATT&CK and its application in defense.
• Experience with SIEM, EDR, NDR, SOAR platforms.
• Strong ability to translate intelligence into actionable defensive measures and reporting.

Responsibilities

• Lead complex CTI analysis across multiple security domains, business functions, and environments.
• Collect, analyze, and correlate threat intel from internal telemetry, OSS, and external sources.
• Develop intelligence products: tactical alerts, threat assessments, actor profiles, and strategic analyses.
• Map adversary behaviors to MITRE ATT&CK and support detections, hunting, and IR.
• Mentor CTI engineers and analysts, promoting best practices and standards.
• Communicate complex threat information to technical and non-technical stakeholders.

Skills

Threat intel methodologies

MITRE ATT&CK knowledge

Threat intel platforms

Scripting (Python/PowerShell/KQL/SQL)

Communication to stakeholders

Mentoring / technical leadership

Adversary tracking

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM

EDR

NDR

SOAR

Job description

Genuine Parts Company seeks a Cyber Threat Intelligence Engineer Lead to provide technical leadership for CTI collection, analysis, enrichment, and operationalization, translating intelligence into actionable defensive measures.

The role partners closely with Security Operations on Incident Response, Threat Hunting, security monitoring, and exposure management, while mentoring CTI engineers and analysts to maintain high standards of intelligence tradecraft.