Remote-First Threat Intelligence Engineer

Cambium Learning Group; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote-first environment

Flexible work arrangements

Job summary

Cambium Learning Group seeks a Counter-Threat Intelligence Engineer to enhance the organization's ability to identify, understand, and counter cyber threats impacting learners, educators, associates, platforms, data, and business operations.

This role blends threat intelligence, adversary emulation, exposure validation, and security engineering to reduce attack surface, improve detection logic, support incident response, and translate findings into practical remediation with measurable risk

Qualifications

• 5+ years of cybersecurity experience with focus in threat intelligence, ethical hacking, or related roles.
• CEH or equivalent offensive security certifications preferred; OSCP/GPEN/CTIA etc. may be considered.
• Strong understanding of cyber kill chain, MITRE ATT&CK, and detection/response tooling.

Responsibilities

• Collect and analyze threat intelligence from trusted sources and indicators of compromise.
• Perform adversary emulation and authorized testing to identify exposures and recommend defenses.
• Collaborate with Security Operations to tune detections, playbooks, and response workflows.
• Support threat exposure management by scoping assets and prioritizing remediation activities.
• Produce actionable threat intelligence summaries and executive-ready briefings.

Skills

Threat intelligence

Ethical hacking

Threat hunting

Incident response

Security operations

Vulnerability assessment

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field

Tools

SIEM

XDR/EDR

Threat intelligence platforms

Vulnerability scanners

Cloud security tools

Identity logs

Endpoint telemetry

Network telemetry

Ticketing/workflow platforms

Job description

Cambium Learning Group seeks a Counter-Threat Intelligence Engineer to enhance the organization's ability to identify, understand, and counter cyber threats impacting learners, educators, associates, platforms, data, and business operations.

This role blends threat intelligence, adversary emulation, exposure validation, and security engineering to reduce attack surface, improve detection logic, support incident response, and translate findings into practical remediation with measurable risk