Threat Intelligence Engineer — AI Infrastructure Security

Fluidstack; New York (NY); Hybrid; USD 220,000 - 280,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Retirement plan

Generous PTO

Job summary

Fluidstack is hiring for a security role focused on defending frontier AI infrastructure. You will track threat actors, build automation pipelines, and drive intelligence-led detections across enterprise, cloud, and data center IT.

The role requires hands-on malware analysis, development of production-grade Python code, and experience with YARA, Sigma, and SIEM tooling. You will own end-to-end security programs, collaborate with detection engineers and incident responders, and contribute to a

Qualifications

• Experience writing production-quality Python code and building automation/data pipelines.
• Hands-on malware/infrastructure/log analysis experience.
• Experience delivering detection logic that stands up to real adversary activity.

Responsibilities

• Track nation-state/advanced criminal actors and convert tooling into actionable intelligence.
• Build/run pipelines that collect/enrich indicators and feed detection/instrumentation.
• Lead intelligence-led hunts across enterprise, cloud, and data center IT.
• Perform malware/phishing-infrastructure/attacker-tooling analysis for detections.
• Curate inbound intelligence from commercial/open/government sources; prioritize for the program.
• Maintain external intelligence-sharing relationships to stay ahead of campaigns.

Skills

Python

Malware analysis

Incident response

Detection logic

Tools

YARA

Sigma

SIEM

Job description

Fluidstack is hiring for a security role focused on defending frontier AI infrastructure. You will track threat actors, build automation pipelines, and drive intelligence-led detections across enterprise, cloud, and data center IT.

The role requires hands-on malware analysis, development of production-grade Python code, and experience with YARA, Sigma, and SIEM tooling. You will own end-to-end security programs, collaborate with detection engineers and incident responders, and contribute to a