> Markdown version of [/jobs/ext/1899211-threat-intelligence-engineer-remote](https://www.wearedevelopers.com/jobs/ext/1899211-threat-intelligence-engineer-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Intelligence Engineer (REMOTE) - **Company:** Fusion Cyber 4, LLC - **Location:** United States (Remote available) - **Experience:** Starter - **Salary:** $33,280.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Code Generation, Data Mapping, Python (Programming Language), Open Source Technology, Large Language Models, Mitre Att&ck, Cyber Threat Analysis, Information Technology - **Published:** July 31, 2026 - **Apply:** https://boards.greenhouse.io/cyware/jobs/5610533003?gh_jid=5610533003 ## About the Role * You are driven, inquisitive, proactive, and energetic * You have a growth mindset and are committed to delivering results * You thrive in a fast-paced, collaborative environment, * US Citizenship is a requirement of this position in accordance with 8 U.S.C 1324b(a)(2)(C) * 5+ years in threat intelligence as an analyst, engineer, or specialist, with hands-on experience on enterprise-scale security products * Deep working knowledge of STIX/TAXII 2.1 objects, relationships, patterning, markings, and how to handle source data that does not fit the standard cleanly. You have implemented STIX mappings in production-not just studied the specification * Hands-on experience with commercial and open-source threat feeds and enrichment sources (CrowdStrike, Mandiant, Recorded Future, Flashpoint, Intel 471, MISP, etc.), and with threat intelligence platforms * Python: you write real code. API clients, parsers, normalizers, validators. This role builds and debugs; it does not spec and hand off * Practical AI fluency. You have used LLMs for real technical work: schema inference, data mapping, documentation parsing, code generation, and you know where they fail * Strong command of the intelligence lifecycle, MITRE ATT&CK, and the handling of IOCs, TTPs, and threat actors in conjunction with SOC, incident response, and threat hunting operations * Comfortable in a customer-facing, cross-functional seat: you can defend a mapping decision to an engineer and explain the value of intelligence to a CISO * Demonstrated ability to work successfully with colleagues across different time zones and geographies We're a lean team, so your impact will be felt immediately. If this all sounds like a good fit for you, why not join us? ## Description The Threat Intelligence Engineer is someone with real threat intelligence depth and the technical ability to understand threat feeds' data model and map it correctly to STIX 2.1, who uses AI to make that work dramatically faster. Someone who can be our threat intelligence SME: writing the use cases, supporting pre-sales and customers, and giving Product the domain expertise that shapes what we build. Come join an exciting cybersecurity product startup that has closed its Series C funding round! What You Will Do: * Map feeds to STIX and own the connector portfolio * Design and maintain mappings from commercial, open-source, and community threat intelligence sources into STIX 2.1 objects, relationships, markings, patterning, and extensions while preserving semantic fidelity. * Understand threat intel feed data models when API documentation is incomplete, or missing: inspect live payloads, sample data, and vendor dashboards to establish ground truth * Own connector lifecycle and quality-from onboarding new sources to detecting schema drift, validating mappings, and ensuring production reliability * Work directly with feed, sandbox, DRP, and enrichment partners on integrations and joint use cases * Leverage AI to accelerate engineering workflows * Build and improve an AI-assisted mapping workflow: infer schemas from sample payloads, propose candidate field-to-STIX mappings from documentation, and flag schema changes, while maintaining rigorous validation and human oversight * Be the threat intelligence SME for Product * Write threat intelligence use cases that drive product design, and pressure-test new capabilities against real analyst workflows. * Partner with Product to shape intelligence workflows, including PIRs, ATT&CK-aligned investigations, threat modeling, prioritization, collaboration, and intelligence-driven automation * Represent Cyware on MITRE and industry alliance committees, and bring what you learn back inside * Be the threat intelligence SME for the field * Serve as the technical threat intelligence expert for customers, prospects, and partners, translating complex intelligence concepts into practical business value * Enable Solution Architects, Sales Engineers, and Customer Success Managers with the threat intelligence knowledge and use cases they need to win and deliver, 47 Minutes Ago Remote or Hybrid Texas, USA 16-16 Hourly Junior 16-16 Hourly Junior Fintech * Professional Services * Sales * Financial Services Provide empathetic phone and email support to members, assist with onboarding and account setup, handle high-volume inbound calls, document interactions, and collaborate with team members to share best practices. Achieve Customer Service 47 Minutes Ago Remote or Hybrid 18-18 Hourly Junior 18-18 Hourly Junior Fintech * Professional Services * Sales * Financial Services Provide empathetic phone and email support to members for onboarding, account setup, and ongoing inquiries. Listen, troubleshoot, document interactions, collaborate with team, and maintain high call volumes while coaching members toward financial solutions. Navan Event Travel Manager 53 Minutes Ago Easy Apply Remote or Hybrid USA Easy Apply 68K-70K Annually Junior 68K-70K Annually Junior Fintech * Information Technology * Payments * Productivity * Software * Travel * Automation Serve as primary client liaison for Event Travel, providing end-to-end travel support, fare and booking management, program coordination from post-sale to billing, troubleshooting using agent tools, maintaining documentation and SLAs, training on travel platforms, and supporting team leads to maximize revenue and client ROI. Top Skills: AmadeusGoogle WorkspaceExcelMicrosoft PowerpointMicrosoft WordNavan TravelxenNavan/R&M SystemsNdcSabreSlack What you need to know about the Colorado Tech Scene With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation. Key Facts About Colorado Tech * Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey) * Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3 * Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech * Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook) * Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures * Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute ## Related Videos - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [Leapter: The Reinvention of Software Development? A Future Built On AI Generated Code.](https://www.wearedevelopers.com/videos/1663-leapter-the-reinvention-of-software-development-a-future-built-on-ai-generated-code) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) - [Hiring AI Native Talents](https://www.wearedevelopers.com/videos/100268-hiring-ai-native-talents) - [Building a Friendly Kotlin SDK to Connect to JetBrains Space](https://www.wearedevelopers.com/videos/128-building-a-friendly-kotlin-sdk-to-connect-to-jetbrains-space) - [Why Your AI Agent Keeps Hallucinating Your Data: Building Deterministic Context Layers](https://www.wearedevelopers.com/videos/2055-why-your-ai-agent-keeps-hallucinating-your-data-building-deterministic-context-layers) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)