Senior Threat Intelligence Platform Lead

Kroll; United States; Hybride; USD 200 000 - 300 000; Plein temps

Avantages offerts par ce poste

Healthcare Coverage

Time Off and Leave Policies

Protective Insurances

Compensation and Rewards

Retirement Plans

Résumé du poste

Kroll is seeking an experienced Threat Intelligence Platform Engineer to join our Cyber Threat Intelligence team in the United States. This role engineers scalable threat intelligence capabilities through automation, data integration, and platform management, bridging intelligence analysis, threat research, data engineering, and security operations.

You will design ETL pipelines, integrate with OSINT, commercial feeds, and government sources, and build dashboards and automation to support threat

Qualifications

• Minimum five years in cybersecurity, threat intel, or security engineering.
• Experience administering a Threat Intelligence Platform (EclecticIQ preferred).
• Proven automation design using Python and API integration.
• Hands-on TI workflows and intelligence lifecycle management.

Responsabilités

• Administer, maintain, and optimize Kroll’s Threat Intelligence Platform.
• Design automated workflows for collecting, enriching, correlating, and distributing TI.
• Build scalable automation for dark web monitoring and threat activity tracking.
• Develop integrations with TI providers, OSINT, government feeds, and internal platforms.
• Design ETL pipelines to ingest, normalize, and organize TI datasets.
• Correlate IOCs, threat actors, malware families, and campaigns using STIX/TAXII and MITRE ATT&CK.
• Develop dashboards, reporting, and visualizations for analysts and stakeholders.
• Evaluate new tech and AI-driven capabilities to improve TI operations.

Connaissances

Malware intel

Threat intel

Automation design

Python development

Data integration

Threat actor tracking

Formation

Bachelor's degree in CS or related

Equivalent professional experience

Outils

PostgreSQL

Elasticsearch/OpenSearch

MongoDB

Selenium or Playwright

SQLAlchemy

Description du poste

Kroll is seeking an experienced Threat Intelligence Platform Engineer to join our Cyber Threat Intelligence team in the United States. This role engineers scalable threat intelligence capabilities through automation, data integration, and platform management, bridging intelligence analysis, threat research, data engineering, and security operations.

You will design ETL pipelines, integrate with OSINT, commercial feeds, and government sources, and build dashboards and automation to support threat