Security Engineer, Threat Intelligence
Fluidstack, New York, NY +3
What you need
The below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly, tell us where you would https://jobs.ashbyhq.com/fluidstack/05c2e69c-42f9-4fcb-9cf0-a467aaf98f1c.
- You've tracked specific nation-state or advanced criminal actors as a core part of your job, and you know their tooling, infrastructure, and targeting well enough to anticipate their next move.
- You write production-quality Python (or similar) and have built the automation and data pipelines your intelligence work depended on, end to end.
- You've done hands-on malware, infrastructure, and log analysis to develop and validate your own findings.
- You've authored quality detection logic (YARA, Sigma, or SIEM-native queries) that shipped to production and held up against real adversary activity.
- You've worked shoulder to shoulder with detection engineers and incident responders, turning intelligence into detections, hunting hypotheses, and incident context while an event was still live.