Threat Intelligence Engineer

About this role

Take-Two Interactive seeks a Threat Intelligence Engineer to operationalize cyber threat intelligence and build engineering solutions that counter security threats. You'll integrate threat data into security infrastructure, work with SOC and incident response teams, and help protect the organization's systems and networks across its gaming divisions.

What you'll do

• Manage threat feeds, parse indicators of compromise (IOCs), and ensure data quality in the CTI program
• Analyze emerging threats and adversary tactics to engineer detection and prevention mechanisms
• Build API integrations, scripts, and playbooks to automate indicator ingestion and dissemination across security platforms
• Collaborate with GSOC, Detection Engineering, and Incident Response teams to operationalize threat intelligence into SIEM, EDR, and firewalls
• Deploy, configure, and maintain Threat Intelligence Platforms (TIP) and related security tools
• Generate intelligence alerts, briefs, and tactical reports for technical teams on active threats

What they're looking for

• Threat intelligence operations and cyber threat analysis
• Network fundamentals and operating system internals
• API integration and data format handling (JSON, XML, STIX/TAXII)
• SIEM, EDR, and Threat Intelligence Platform (TIP) tools
• Scripting languages (Python, PowerShell, or Bash)
• MITRE ATT&CK and Cyber Kill Chain frameworks
• Security incident analysis and malware fundamentals
• Written and verbal communication for technical documentation