> Markdown version of [/jobs/ext/4683336-threat-intelligence-engineer](https://www.wearedevelopers.com/jobs/ext/4683336-threat-intelligence-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Intelligence Engineer - **Company:** Take-Two Interactive Software, Inc. - **Location:** Las Vegas, NV, United States - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, Microsoft Azure, Bash Shell, Cloud Computing, CompTIA Security+, Cyber Security, Computer Telephony Integration, Intrusion Detection and Prevention, JSON, Python (Programming Language), Networking Basics, Open Source Intelligence, Windows PowerShell, Reverse Engineering, Security Information and Event Management, Systems Integration, Extensible Markup Language (XML), Scripting, Cloud Platform System, Mitre Att&ck, Advanced Reports, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Api Design, Api Management, Vulnerability Analysis - **Published:** November 12, 2026 - **Apply:** https://www.careerbuilder.com/job-details/threat-intelligence-engineer-las-vegas-nv--0998df80-3d65-4446-a76b-e60656d38c6d ## About the Role * Experience: 2-4 years of experience in cybersecurity, with at least 1-2 years focused on threat intelligence, security engineering, or security operations (SOC). * Technical Expertise: A solid understanding of network fundamentals, operating system internals, common attack vectors, and the general cyber threat landscape. * Engineering Mindset: Experience working with APIs, data formats (JSON, XML, STIX/TAXII), and systems integration to streamline security workflows. * Analytical Skills: The ability to analyze data from various sources (e.g., open-source intelligence, technical reports, internal logs) to draw technical conclusions and identify malicious activity. * Intelligence Framework Knowledge: Familiarity with common threat intelligence and security frameworks like MITRE ATT&CK and the Cyber Kill Chain. * Communication Skills: Strong written and verbal communication skills, with the ability to document engineering processes and communicate threat findings clearly. * Tool Proficiency: Hands-on experience with security information and event management (SIEM) systems, threat intelligence platforms (TIPs), or EDR solutions. Great to Have * Scripting Skills: Proficiency in scripting languages (e.g., Python, PowerShell, or Bash) to automate data collection, API interactions, and analysis tasks. * Certifications: Relevant industry certifications such as CompTIA Security+/CySA+, GIAC (GSEC, GCTI), or similar intermediate credentials. * Cloud Experience: Familiarity with securing and monitoring cloud environments (AWS, Azure, or GCP). * Malware Familiarity: Basic understanding of malware analysis or reverse engineering concepts. ## Description We are looking for a Threat Intelligence Engineer. In this role, you will be on the front lines of our defense, helping to operationalize intelligence and build engineering solutions to counter emerging security threats. You'll work closely with various security and technology teams to integrate threat data into our security infrastructure, strengthening our defenses and protecting our organization. Your hands-on expertise will directly contribute to safeguarding Take-Two and its labels' systems, networks, and data. You will work with Take-Two's Information Security teams, reporting to the Director of Threat Intelligence., * Threat Intelligence Operations: Support the day-to-day operations of the cyber threat intelligence (CTI) program by managing threat feeds, parsing indicators of compromise (IOCs), and ensuring data quality across our platforms. * Threat Analysis & Engineering: Analyze emerging threats and adversary tactics, techniques, and procedures (TTPs) to help engineer robust detection and prevention mechanisms. * Enhance Our Security Posture: Collaborate with our Global Security Operations Center (GSOC), Detection Engineering, and Incident Response teams to ingest and operationalize threat intelligence into our SIEM, EDR, and firewalls. * Automation & Integration: Build and maintain API integrations, scripts, and playbooks to automate indicator ingestion, correlation, and dissemination across security platforms. * Security Infrastructure Support: Assist in the deployment, configuration, maintenance, and tuning of our Threat Intelligence Platforms (TIP) and related security engineering tools. * Produce Actionable Reporting: Assist in generating timely intelligence alerts, briefs, and tactical reports for technical teams to provide context around active threats.