Threat Intelligence Platform Engineer: Automation Analytics

Kroll; United States; On-site; USD 200,000 - 300,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) matching

Paid time off

Job summary

Kroll is seeking an experienced Threat Intelligence Platform Engineer to join its Cyber Threat Intelligence team in the United States. You will design, build, and maintain scalable automation and data pipelines that transform diverse intelligence sources into actionable insights for threat detection, incident response, and strategic decision-making.

The role bridges intelligence analysis, data engineering, and security operations, requiring hands-on experience with APIs, ETL, and cloud-based

Qualifications

• Bachelor's degree or equivalent professional experience.
• 5+ years of experience in cybersecurity or threat intelligence.
• Experience administering a Threat Intelligence Platform (EclecticIQ strongly preferred).
• Proven experience designing automation solutions using Python.
• Experience integrating APIs and external data sources.

Responsibilities

• Administer, maintain, and optimize Kroll’s Threat Intelligence Platform.
• Design and develop automated workflows for collecting, enriching, correlating, and distributing cyber threat intelligence.
• Build scalable automation to support dark web monitoring and credential exposure tracking.
• Develop dashboards, reporting, and visualizations for analysts and stakeholders.
• Evaluate emerging technologies and AI-driven capabilities to improve threat intelligence operations.

Skills

Python

Automation

Threat Intelligence

OSINT

APIs

Education

Bachelor's degree in CS/related

Tools

EclecticIQ

PostgreSQL

Elasticsearch/OpenSearch

MongoDB

SQLAlchemy

Job description

Kroll is seeking an experienced Threat Intelligence Platform Engineer to join its Cyber Threat Intelligence team in the United States. You will design, build, and maintain scalable automation and data pipelines that transform diverse intelligence sources into actionable insights for threat detection, incident response, and strategic decision-making.

The role bridges intelligence analysis, data engineering, and security operations, requiring hands-on experience with APIs, ETL, and cloud-based