Senior Research Engineer, Threat Intelligence

SecurityScorecard

Senior Research Engineer in Threat Intelligence at SecurityScorecard. Work on production-ready artifacts from research outputs in a hybrid team environment.

Posted 7/1/2026full-timeAustin • Texas • 🇺🇸 United StatesSenior💰 $140,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and maintaining detection content and production systems for threat intelligence, utilizing programming skills in Python and TypeScript/Node, and applying knowledge of STIX 2.1 and TAXII 2.1 standards. Proven ability to collaborate with cross-functional teams to ensure research outputs are effectively integrated into products.

Highest-signal resume keywords

Python ProgrammingTypeScript/Node DevelopmentSTIX 2.1 KnowledgeThreat Intelligence ExperienceCloud Infrastructure (AWS)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

YARASigmaSTIX PatterningRelational Data StoresCache Data StoresStreaming Data PlatformsBatch Data PlatformsCI/CD PipelinesPolicy-as-CodeExpression-Language Engines

Tools & Technologies

AWSContainersMISPMITRE ATT&CK

Industry Keywords

CybersecurityDetection EngineeringSecurity ResearchThreat Intel DataAutomation

Tech Stack

Tools & technologies

AWSCloudCyber SecurityNode.jsPythonTypeScript

About the role

Key responsibilities & impact

Own the path from research output to production-ready artifact: a detection rule, a distributed feed, a scoring input, or a customer alert
Build and maintain STRIKE platform components across multiple services and runtimes
Turn research into shipped detection content: YARA, Sigma, STIX patterns, behavioral indicators, and the pipelines that distribute them
Drive STIX 2.1 adoption as a unified output schema and TAXII 2.1 as a distribution standard
Build the automation that removes commodity overhead from research work
Coordinate with engineering, measurement, and platform product teams so research actually lands in product

Requirements

What you’ll need

Bachelor's or Master's in Computer Science, Cybersecurity, or a related technical field
5 to 8 years in a hands-on engineering role with meaningful exposure to threat intelligence, security research, or detection engineering
Prior experience building production systems that consume or emit threat intel data is required
Python and TypeScript/Node at a production level
Relational and cache data stores, plus at least one streaming or batch data platform
Cloud infrastructure (AWS preferred), containers, and CI/CD pipelines
Working knowledge of STIX 2.1, TAXII 2.1, MISP, and MITRE ATT&CK, and how they work together in practice
Hands-on experience with YARA, Sigma, and STIX Patterning
Experience with policy-as-code or expression-language engines (CEL, OPA, or similar) (Bonus)
Published or co-authored security research (campaigns, vulnerabilities, adversary tracking) (Bonus)

Benefits

Comp & perks

competitive salary
stock options
Health benefits
unlimited PTO
parental leave
tuition reimbursements