Principal Threat Researcher, Software Engineer – Counter-Threat Ops

. Lead initiatives to disrupt threat actor operations .

Posted 4/24/2026full-timeRemote • Washington • 🇺🇸 United StatesLead💰 $197,300 - $313,700 per yearWebsite

Tools & technologies

PythonSplunkSQL

Key responsibilities & impact

Lead initiatives to disrupt threat actor operations
Develop high-fidelity technical evidence and attribution data to support criminal prosecution
Deepen Salesforce’s reach into the broader cyber intelligence community
Perform expert-level tracking of advanced e-crime and state-sponsored actors
Build custom scripts, investigative tools, and automation (Python, SQL, Splunk)
Serve as a technical mentor on the Threat Intelligence team
Collaborate with Incident Response, Security Engineering, and Platform Defense

What you’ll need

10+ years of hands-on experience identifying, tracking, and disrupting advanced cyber threat actors
5+ years hands-on experience with strategic intelligence writing and standard conventions
Established threat intelligence practitioner and active member of private, invite-only Information Security trust groups
Experience with Cyber Threat Intelligence writing for both technical, non-technical, and executive audiences
Experience conducting and correlating threat research using OSINT and proprietary tools
3+ years experience scripting, automating, and building investigative tooling (Python, Bash, SQL, Splunk)
Advanced prompt engineering skills and the ability to write precise, structured prompts

Comp & perks

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

PythonSQLSplunkscriptingautomationthreat intelligence writinginvestigative toolingOSINTprompt engineeringcorrelating threat research

Soft Skills

technical mentorshipcollaborationcommunication