Threat Intelligence Engineer - Frontline AI Compute Security

Fluidstack; United States; Remote; USD 200,000 - 280,000; Full time

Benefits offered by this job

Equity

Health insurance

Generous PTO

Job summary

Fluidstack is seeking a Senior Security Intelligence professional to track threat actors and build end-to-end detection pipelines for frontier AI infrastructure. You will perform malware analysis, develop production-grade Python tooling, and lead intelligence-led hunts across on-prem and cloud environments.

Responsibilities include curating intel feeds, shaping detections, and collaborating with detection engineers and incident responders to operationalize findings in real time.

Qualifications

• You’ve tracked nation-state or advanced criminal actors as part of your job.
• You write production-quality Python and built automation pipelines end-to-end.
• You’ve done hands-on malware, infrastructure, and log analysis.
• You’ve authored detection logic shipped to production and used in live events.

Responsibilities

• Track threat actors and turn tooling into actionable intelligence.
• Build and run pipelines that collect, enrich, and correlate indicators.
• Drive intelligence-led hunts across enterprise, cloud, and IT telemetry.
• Perform malware and phishing-infrastructure analysis for indicators and TTPs.
• Curate inbound intelligence pipelines and prioritize for the program’s threat model.
• Maintain external intelligence-sharing relationships with ISACs and partners.

Skills

Threat intelligence

Python production code

Malware analysis

Detection engineering

Incident response

Open-source intelligence

LLMs / agentic tooling

Tools

YARA

Sigma

SIEM queries

Job description

Fluidstack is seeking a Senior Security Intelligence professional to track threat actors and build end-to-end detection pipelines for frontier AI infrastructure. You will perform malware analysis, develop production-grade Python tooling, and lead intelligence-led hunts across on-prem and cloud environments.

Responsibilities include curating intel feeds, shaping detections, and collaborating with detection engineers and incident responders to operationalize findings in real time.