Senior Threat Intelligence Engineer

Posted 6 Hours Ago
Be an Early Applicant
Hiring Remotely in Portugal
Remote
Senior level
Insurance • Cybersecurity
The Role
Lead threat intelligence efforts focused on zero-day vulnerabilities, exploitation activity, detection engineering, honeypot telemetry, and actionable policyholder alerts. The role coordinates with security, underwriting, incident response, product, and data engineering teams; researches vulnerabilities; writes detection signatures and scripts; publishes security advisories; and participates in emergency on-call coverage.
Summary Generated by Built In
About us

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks.   

Opportunities to make an impact with bold thinking are real—and happening daily at Coalition.

About the role
Join Coalition’s Threat Intelligence team to identify emerging vulnerabilities and exploitation activity before they cause loss for policyholders. You’ll lead key parts of the Zero-Day Alert process and build the detections, honeypots, and original intelligence behind Coalition’s Active Insurance platform, working across Security, Underwriting, Incident Response, Product, and Data Engineering.
Responsibilities
  • Drive the Zero-Day Alert process from vulnerability triage to actionable policyholder notification
  • Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities
  • Write and refine technology fingerprints, detection rules, and security findings that turn scan data into reliable risk signals
  • Maintain and expand the distributed honeypot network, analyzing telemetry for exploitation and new adversary techniques
  • Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research
  • Publish advisories, research, and briefings that inform security decisions
  • Participate in the on-call rotation for emergency notifications
Skills and Qualifications
  • 5+ years in threat intelligence, vulnerability research, pen testing, or defensive security engineering
  • Deep knowledge of network protocols, operating systems, web apps, and exploitation (RCE, auth bypass, edge-device vulnerabilities)
  • Experience assessing new vulnerabilities under time pressure and translating them into practical enterprise risk
  • Hands-on experience writing scanner detections, signatures, or parsing scripts (Python, regex, protocol fingerprints)
  • Experience with honeypots, deception tech, or internet-wide scanning and other large security datasets
  • Strong Python and SQL skills
  • Excellent communication with both technical and non-technical audiences
  • A track record of clear documentation or public security writing, plus the judgment to lead complex work independently
Bonus Points 
  • Experience with Censys, Shodan, BinaryEdge, or attack surface mapping
  • Reverse engineering, patch diffing, or PoC exploit verification
  • Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS
  • Public research, CVE credits, or conference talks
  • Knowledge of cyber insurance, underwriting, or risk aggregation modeling
Perks
  • 100% medical, dental and vision coverage
  • Flexible PTO policy
  • Annual home office stipend and WeWork access
  • Mental & physical health wellness programs (One Medical, Headspace, Wellhub, and more)!
  • Competitive compensation and opportunity for advancement
Why Coalition? 

Work at Coalition is centered on the joint mission to Protect the Unprotected. We have built a remote-first, highly inclusive culture that welcomes people from diverse backgrounds. We trust each other to take responsibility, share ownership of outcomes, and put in the work together to protect businesses from digital risk. Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes while remaining true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion.

We’re always looking for collaborative, inquisitive individuals to join #OurCoalition.

Visit our Newsroom > 

Privacy Notice

Coalition is committed to protecting your privacy and handling your personal information responsibly. We collect, use, and store personal information as necessary for the recruitment process and in compliance with applicable privacy laws and regulations in all regions where we operate. We want you to understand what personal information we collect, how we use it, and your rights regarding access, correction, and deletion of your data where applicable. Information submitted, collected, and processed as part of your application is subject to Coalition's Privacy Policy. For further details, please review our full Privacy Policy or contact us with any questions regarding how your information is handled.

Our Privacy Policy > 

Safe Hiring Notice

All legitimate communication from Coalition comes from @coalitioninc.com emails, and open roles are listed only on our Careers page. We never ask for payment, banking details, or personal identification before an offer is accepted through our secure systems. If you believe you’ve been a victim of fraudulent recruiting, follow guidance from the Federal Trade Commission (FTC).

Anti-Discrimination Notice

Coalition is proud to be an Equal Opportunity employer. Our policy is to provide equal employment opportunities to all individuals, without discrimination or harassment on the basis of any characteristic protected by applicable laws in each country where we operate. This commitment includes, but is not limited to, ensuring equal treatment in recruitment, selection, training, promotion, transfer, compensation, and all other aspects of employment. Coalition does not tolerate discrimination or harassment of any kind, and we are dedicated to fostering an inclusive and supportive workplace.

Accommodations

Coalition is committed to providing reasonable accommodations to qualified individuals with disabilities, including applicants and employees, in accordance with applicable laws and regulations in each country where we operate. Our policy is to support equal opportunity in the hiring process by considering qualified applicants regardless of disability or other protected characteristics, unless providing accommodation would impose an undue hardship or disproportionate burden. If you require accommodation to complete an application, interview, pre-employment testing, or participate in the selection process, please contact us at [email protected]. We also consider all qualified applicants, including those with criminal histories, in line with applicable laws and regulations in each jurisdiction.

To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.

Skills Required

  • 5+ years of experience in threat intelligence, vulnerability research, penetration testing, or defensive security engineering
  • Deep knowledge of network protocols, operating systems, web applications, and exploitation techniques
  • Experience assessing vulnerabilities under time pressure and translating findings into enterprise risk
  • Hands-on experience writing scanner detections, signatures, or parsing scripts using Python, regex, or protocol fingerprints
  • Experience with honeypots, deception technology, internet-wide scanning, or large security datasets
  • Strong Python and SQL skills
  • Excellent communication with technical and non-technical audiences
  • Track record of clear documentation or public security writing
  • Ability to independently lead complex work
  • Experience with Censys, Shodan, BinaryEdge, or attack surface mapping
  • Experience with reverse engineering, patch diffing, or proof-of-concept exploit verification
  • Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS
  • Public research, CVE credits, or conference talks
  • Knowledge of cyber insurance, underwriting, or risk aggregation modeling

Coalition Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Coalition and has not been reviewed or approved by Coalition.

  • Healthcare Strength — Health coverage is presented as comprehensive, with medical, dental, and vision insurance, plus mental health support and wellness programs. Feedback suggests these offerings are a core strength of the total rewards package.
  • Equity Value & Accessibility — Equity is offered broadly to full-time employees, aligning employees with company growth. Feedback suggests this ownership component is a meaningful part of total compensation for many roles.
  • Leave & Time Off Breadth — Paid time off is positioned as flexible or unlimited, alongside standard sick leave and local holidays. Feedback suggests this flexibility supports work-life balance in a remote-first setup.

Coalition Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: San Francisco, CA
618 Employees
Year Founded: 2017

What We Do

Coalition is the leading provider of cyber insurance and security, combining comprehensive insurance and proactive cybersecurity tools to help businesses manage and mitigate cyber risk. Coalition’s unique product offerings combine best-in-class insurance and proactive cybersecurity tools to help keep businesses safe.

Similar Jobs

Tufin Logo Tufin

Account Manager

Security • Cybersecurity
Remote or Hybrid
27 Locations
500 Employees

Cloudflare Logo Cloudflare

Solutions Engineer

Cloud • Information Technology • Security • Software • Cybersecurity
Remote or Hybrid
6 Locations
4400 Employees
116K-165K Annually

Hilton Logo Hilton

Finance Intern / Trainee

Software • Hospitality
Remote
Portugal
121228 Employees

Pfizer Logo Pfizer

Principal Engineer

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Remote or Hybrid
31 Locations
121990 Employees
177K-294K Annually

Similar Companies Hiring

Granted Thumbnail
Artificial Intelligence • Healthtech • Insurance • Mobile • Financial Services
New York, New York
23 Employees
NODA AI Thumbnail
Artificial Intelligence • Information Technology • Software • Cybersecurity
Sydney, AU
54 Employees
Vega Thumbnail
Artificial Intelligence • Automotive • Insurance • Transportation
US
65 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account