Threat Intel Platform Engineer: Research to Production

Zoomcar; Pittsburgh (Allegheny County); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Stock options

Health benefits

Unlimited PTO

Parental leave

Tuition reimbursements

Job summary

Join Zoomcar in Pittsburgh as part of the STRIKE team, specializing in Threat Intelligence. As an engineering counterpart, you will integrate research findings into actionable insights, transforming them into production-ready detection rules and feeds. Your role requires strong collaboration with technical leaders to ensure streamlined operational delivery.

Qualified candidates will have 5-8 years of experience in engineering, specifically in threat intelligence, including a solid understanding of Python and cloud infrastructures. You will also drive the adoption of industry standards like STIX 2.1 while innovating on the Threat Intelligence Platform.

Qualifications

• 5 to 8 years in a hands‑on engineering role with exposure to threat intelligence.
• Experience building production systems that consume or emit threat intel data.
• Hands-on with detection and research tooling, including writing detection logic.

Responsibilities

• Own the path from research output to production‑ready artifact.
• Build and maintain STRIKE platform components.
• Turn research into shipped detection content and build correlation pipelines.
• Drive STIX 2.1 adoption and define schemas.

Skills

Python

TypeScript/Node

Cloud infrastructure (AWS preferred)

YARA

Sigma

STIX Patterning

Education

Bachelor’s or Master’s in Computer Science or Cybersecurity

Job description

Join Zoomcar in Pittsburgh as part of the STRIKE team, specializing in Threat Intelligence. As an engineering counterpart, you will integrate research findings into actionable insights, transforming them into production-ready detection rules and feeds. Your role requires strong collaboration with technical leaders to ensure streamlined operational delivery.

Qualified candidates will have 5-8 years of experience in engineering, specifically in threat intelligence, including a solid understanding of Python and cloud infrastructures. You will also drive the adoption of industry standards like STIX 2.1 while innovating on the Threat Intelligence Platform.