Security Engineer, Cyber Threat Intelligence

About this role

Saronic Technologies seeks a hands-on Security Engineer for Cyber Threat Intelligence to operationalize threat intelligence into detection and defense strategies. You'll track nation-state and APT actors targeting maritime autonomy and defense systems, fusing external intelligence with internal telemetry to drive actionable security outcomes across the organization.

What you'll do

• Develop and manage Priority Intelligence Requirements and collection framework aligned with maritime-autonomy and defense-industrial-base threat models
• Track priority adversaries including nation-states and APT groups; maintain adversary profiles with tooling, infrastructure, and tradecraft intelligence
• Operationalize indicators and TTPs into detections, hunts, and remediation via SIEM, Sigma, and YARA rules
• Fuse external intel with internal telemetry using graph-based data stores to correlate attack paths and prioritize by real exposure
• Produce finished intelligence briefings for leadership using analytic tradecraft, MITRE ATT&CK, and STIX modeling
• Conduct threat hunts across endpoint, cloud, identity, and network telemetry; perform infrastructure and malware analysis

What they're looking for

• Cyber threat intelligence and threat hunting
• Detection engineering (Sigma, YARA, SIEM authoring)
• Infrastructure analysis (passive DNS, certificate pivoting, WHOIS/ASN)
• MITRE ATT&CK, Diamond Model, Cyber Kill Chain
• STIX/TAXII intelligence modeling and sharing
• Python or similar software engineering for automation and data pipelines
• Priority Intelligence Requirements and structured analytic techniques
• Malware triage and adversary attribution