Develop network-based threat detections and conduct threat intelligence research on actors, malware, campaigns, and malicious infrastructure. Analyze PCAP, NetFlow, passive DNS, certificates, and related datasets; build automated detection processes; track threats; and produce reports for technical and executive audiences. Collaborate on analytics tools, research methodologies, and automation while supporting customers and industry partners. The role is remote with occasional travel.

Design, build, and operate high-throughput threat intelligence systems, including data collection, enrichment pipelines, APIs, services, and databases. Own systems through deployment, monitoring, and production iteration; improve reliability, performance, and observability; participate in architectural planning and on-call support. Collaborate with analysts and cross-functional teams, mentor engineers, and translate threat intelligence workflows into scalable software.