> Markdown version of [/jobs/ext/3767097-information-security-engineer-cyber-threat-intelligence](https://www.wearedevelopers.com/jobs/ext/3767097-information-security-engineer-cyber-threat-intelligence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer - Cyber Threat Intelligence

- **Company:** Williams-sonoma, Inc.
- **Location:** San Francisco, CA, United States
- **Experience:** Experienced
- **Salary:** $100,000 - $120,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Intrusion Detection and Prevention, Security Information and Event Management, Enterprise Software Applications, Mitre Att&ck, Cyber Threat Analysis, Cybercrime
- **Published:** October 16, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8cedd71fe69402cc

## About the Role

* 3+ years of experience in cybersecurity operations, threat intelligence, threat hunting, or related security engineering.
 * Experience analyzing security telemetry, IOCs, attacker behaviors, and investigation evidence.
 * Working knowledge of SIEM, EDR, threat intelligence platforms, and MITRE ATT&CK.
 * Ability to develop investigative hypotheses, document conclusions, and collaborate with SOC and Detection Engineering.
 * Strong written communication, analytical thinking, and technical troubleshooting skills.
 * Hands-on experience with Google SecOps, MISP, CrowdStrike, Feedly, VirusTotal, or Any.Run preferred.
 * Experience developing threat-hunting queries, enrichment scripts, or automated intelligence workflows preferred.
 * Familiarity with retail/eCommerce threat patterns and intelligence-led vulnerability prioritization preferred.
 * This role requires being onsite in the San Francisco, CA office Monday through Thursday.

## Description

You will be part of the Enterprise Cyber Security organization responsible for protecting WSI against emerging cyber threats. The Cyber Threat Intelligence team collects, analyzes, and operationalizes threat information to support proactive threat hunting, detection engineering, and incident response., As an Information Security Engineer - Cyber Threat Intelligence, you will independently investigate emerging threats, manage indicators of compromise (IOCs), conduct threat hunts, and provide actionable intelligence to the SOC and Detection Engineering teams. You will work across intelligence research and hands-on security investigations to help improve enterprise defenses., * Collect, validate, enrich, document, and distribute indicators of compromise and relevant threat intelligence.

 * Research threat actors, campaigns, tactics, techniques, and procedures affecting retail, eCommerce, and enterprise systems.
 * Conduct independent, hypothesis-driven threat hunts using endpoint, identity, network, and SIEM telemetry.
 * Partner with SOC and Detection Engineering to translate intelligence into detection use cases, hunting queries, and response guidance.
 * Use Google SecOps, MISP, CrowdStrike, Feedly, VirusTotal, and Any.Run to investigate, correlate, and operationalize threat information.
 * Monitor emerging vulnerabilities, exploitation activity, and relevant threats; communicate actionable prioritization to security and technology teams.
 * Map relevant adversary behavior and hunting findings to MITRE ATT&CK.
 * Produce concise intelligence reports, threat briefings, and investigative summaries for technical and leadership audiences.
 * Support incident investigations with IOC enrichment, campaign context, and related-activity analysis.
 * Develop repeatable workflows and appropriate automation or AI-assisted analysis while validating intelligence quality.