Senior Threat Intelligence Engineer - ML-Driven Defenses

CloudFlare; San Francisco (CA); On-site; USD 170,000 - 210,000; Full time

Job summary

Cloudflare in Austin, TX is seeking a Senior Threat Intelligence Engineer to blend Threat Intelligence with advanced machine learning to rapidly and effectively defend our organization.

You will research threats from OSINT, commercial feeds, dark web, and internal security events; design ML detection use cases; profile threat actors using MITRE ATT&CK; build SOAR playbooks and API integrations to automate defenses, incident response, and CI/CD security.

Qualifications

• 4+ years of hands-on experience in a Security Engineering, Cyber Threat Intelligence, or Security Automation role.
• Proficiency in Python for automation.
• Experience with MITRE ATT&CK and threat actor profiling.
• Experience building SOAR playbooks and API integrations.
• Strong understanding of cyber kill chain, threat actor TTPs, attack vectors.
• Ability to work autonomously with urgency, ownership and initiative.

Responsibilities

• Research, collect, and analyze threat intelligence from OSINT, commercial feeds, dark web, and internal security events.
• Design, implement, and maintain detection use cases for the ML lifecycle (data ingestion, training, deployment, inference).
• Develop detailed threat actor profiles and identify potential impacts to the organization using MITRE ATT&CK.
• Produce actionable intelligence reports and briefings for technical and executive audiences.
• Ingest, enrich, correlate, and contextualize IOCs and IOAs into security platforms.
• Design, develop, and implement SOAR workflows to streamline security operations and incident response.
• Integrate diverse security tools via APIs and scripting to create automated feedback loops.
• Identify and engineer automation to improve security processes and maturity.
• Provide threat context to support Incident Response during active incidents.
• Collaborate with Detection Engineers, Security Engineers, and Devs to embed intelligence in CI/CD.

Skills

Threat Intelligence

Machine Learning

Python

SOAR

MITRE ATT&CK

Threat Hunting

Automation

Incident Response

Data Analysis

Cloud Security

Tools

SIEM

EDR

Threat Intelligence Platforms

Terraform

APIs

Job description

Cloudflare in Austin, TX is seeking a Senior Threat Intelligence Engineer to blend Threat Intelligence with advanced machine learning to rapidly and effectively defend our organization.

You will research threats from OSINT, commercial feeds, dark web, and internal security events; design ML detection use cases; profile threat actors using MITRE ATT&CK; build SOAR playbooks and API integrations to automate defenses, incident response, and CI/CD security.