> Markdown version of [/jobs/ext/3572179-threat-intelligence-platform-integrations-sme](https://www.wearedevelopers.com/jobs/ext/3572179-threat-intelligence-platform-integrations-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Intelligence Platform Integrations SME

- **Company:** Leidos, Inc.
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $87,100.0 - $157,450.0
- **Contract:** Permanent contract
- **Skills:** Computer Programming, Computer Networks, Computer Telephony Integration, Data Dictionary, Intelligence Analysis, JSON, Python (Programming Language), Comptia Pentest+ CE, Systems Integration, YAML, Cyber Threat Analysis, Git, Enterprise Integration, Cyber Warfare, Software Version Control
- **Published:** October 3, 2026
- **Apply:** https://jobs.military.com/career/355495/dtip-integrations-sme-ohio-oh-whitehall

## About the Role

* Must have an active TS/SCI due to classified intelligence analysis.\n
 * Bachelor's degree in a related discipline and 4+ years of directly relevant experience; additional related years of experience is accepted in lieu of a degree.\n
 * 2+ years of experience working with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations.\n
 * Proficiency in programming using Python.\n
 * Proven experience with configuration editing using both JSON and YAML.\n
 * Experience with leveraging version control systems such as Git.\n
 * Applied knowledge of various security solutions and their integrations as employed in enterprise environments, specifically CBII, Palo Alto, ERS, and Versa.\n
 * Requires 8140 Cyber Defense Infrastructure Support Specialist 521 (CS) Intermediate-level compliance, to include one of the following certifications: Security+, PenTest+, CySA+, GSEC, or GMON.\n, * Deep understanding of defensive tactics, techniques, and procedures (TTPs) for threat detection and response.\n
 * Experience with automated block list integrations and solutions.\n
 * Experience with integration of systems as well as assessing, scoring, and operationalizing new CTI feeds\n
 * Knowledge utilizing STIX and TAXII standards to develop, configure, and automate threat intelligence solutions across enterprise security platforms \n
 * Experience with Integrated Adaptive Cyber Defense: "Low-Regret" Methodology for CTI Triage\n
 * Advanced experience assessing emerging threats and vulnerabilities and the CTI lifecycle.\n
 * Skills building and reading data dictionaries\n
 * Exceptional written and verbal communication skills tailored for senior intelligence and operational leadership.\n
 * Prior experience functioning as a capability or mission owner within a DoW or Intelligence Community environment.\n

## Description

Leidos' Digital Modernization sector has a current job opportunity for a Threat Intelligence Platform Integrations SME. We are seeking an experienced Cyber Threat Intelligence (CTI) professional to act as a mission owner for our Threat Intelligence Platform. As a Threat Intelligence Platform Integrations SME at DISA Global, you will provide sustained support for CTI fusion, low-regret model scoring, and the implementation of blocking actions to create advanced defensive capabilities. You will play a critical role in maintaining this capability, optimizing its performance, and integrating it across various DISA security solutions to enhance the overall defense of the Department of War Information Network (DoWIN).