Threat Intelligence Engineer - AI-Powered Security

CloudFlare; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity plan

Health & welfare benefits

401(k) Retirement Savings Plan

Employee Stock Participation Plan

Flexible paid time off

Job summary

Cloudflare seeks a Threat Intelligence Engineer to join the Threat Detection Automation and Intelligence Team. You will transform raw threat data into actionable defenses, reducing mean time to detect and respond to sophisticated cyber threats.

The role blends TI insights with ML engineering to automate protections across Cloudflare’s security stack. The ideal candidate brings 4+ years in security engineering or threat intelligence, strong Python skills, and experience with SOAR, SIEM, and TIPs

Qualifications

• 4+ years of hands-on experience in Security Engineering, Cyber Threat Intelligence, or Security Automation.
• Experience with threat intelligence workflows and security operations tooling.

Responsibilities

• Proactively research, collect, and analyze threat intelligence from OSINT, commercial feeds, dark web, and security events.
• Design, implement, and maintain detection use cases across the machine learning lifecycle.
• Develop threat actor profiles using MITRE ATT&CK and assess potential impacts to Cloudflare.

Skills

Threat intelligence

MITRE ATT&CK

Python

Machine learning

Security automation

Threat hunting

Communication

Autonomy

Cloud security

OC/IOA analysis

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

SOAR

Threat Intelligence Platforms

APIs & scripting (Python)

Terraform (IaC)

Job description

Cloudflare seeks a Threat Intelligence Engineer to join the Threat Detection Automation and Intelligence Team. You will transform raw threat data into actionable defenses, reducing mean time to detect and respond to sophisticated cyber threats.

The role blends TI insights with ML engineering to automate protections across Cloudflare’s security stack. The ideal candidate brings 4+ years in security engineering or threat intelligence, strong Python skills, and experience with SOAR, SIEM, and TIPs