Threat Intelligence Platform Engineer - Production

Zoomcar; Colorado; Remote; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Unlimited PTO

Parental leave

Tuition reimbursements

Job summary

Zoomcar is looking for an Engineering Lead in their Threat Intelligence team, responsible for transforming research into production-ready artifacts while collaborating across engineering and research teams.

This role requires the ability to work closely with leadership, take research findings, and ship usable outputs that contribute to security standards.

You should possess a strong background in engineering, particularly in threat intelligence, and hold a relevant degree. Benefits include competitive salary and flexible PTO.

Qualifications

• 5 to 8 years in a hands-on engineering role focused on threat intelligence.
• Experience building production systems that work with threat intel data.
• Familiarity with security research and detection engineering.

Responsibilities

• Own the path from research output to production-ready artifacts.
• Build and maintain STRIKE platform components across multiple services.
• Drive STIX 2.1 adoption and define schemas for downstream teams.

Skills

Python

TypeScript/Node

Relational and cache data stores

Streaming/batch data platforms

Cloud infrastructure (AWS preferred)

STIX 2.1

TAXII 2.1

MISP

MITRE ATT&CK

Education

Bachelor’s or Master’s in Computer Science or Cybersecurity

Tools

YARA

Sigma

STIX Patterning

Job description

Zoomcar is looking for an Engineering Lead in their Threat Intelligence team, responsible for transforming research into production-ready artifacts while collaborating across engineering and research teams.

This role requires the ability to work closely with leadership, take research findings, and ship usable outputs that contribute to security standards.

You should possess a strong background in engineering, particularly in threat intelligence, and hold a relevant degree. Benefits include competitive salary and flexible PTO.