Join STRIKE as the engineering counterpart to threat research, owning delivery from research artifacts (malware findings, indicators, behavioral patterns) to production-ready detections, distribution feeds, and platform APIs. Role requires 5+ years of hands-on engineering experience with production threat-intel systems and strong skills in Python and TypeScript/Node.js, STIX/TAXII, YARA/Sigma, cloud infrastructure (AWS), containers/CI-CD, and production language-model systems. Reports to the Head of Threat Research. No immigration sponsorship provided for this position.

Join STRIKE as an engineering counterpart to threat researchers to own the pipeline from findings to production artifacts (detection rules, feeds, APIs). Requires 5+ years engineering experience with threat intelligence, production systems that consume/emit threat intel, strong Python and TypeScript/Node skills, working knowledge of STIX/TAXII/MISP/MITRE ATT&CK, hands-on YARA and Sigma experience, and experience shipping systems using language models. Remote role tied to Pittsburgh, PA; company states it does not provide immigration sponsorship for this position.

Join STRIKE to own the research-to-production pipeline: build and maintain platform components (distribution servers, sandbox orchestration, ingestion, agent runtimes), produce detection content (YARA, Sigma, STIX), drive STIX/TAXII adoption, and ship model-driven and traditional workflows. Requires 5+ years of engineering experience with threat intelligence or detection engineering, production-level Python and TypeScript, cloud and CI/CD experience, and hands-on experience with threat intel standards and detection tooling.

Remote role (listed with Colorado Springs, CO) on SecurityScorecard's STRIKE team. Owns the research-to-production pipeline: building platform components, detection content (YARA, Sigma, STIX), feed distribution, and model-assisted research workflows. Requires 5+ years engineering experience with prior production systems consuming or emitting threat intel; production experience with language models, Python and TypeScript/Node, cloud infrastructure (AWS), containers, CI/CD, and familiarity with STIX/TAXII/MISP/MITRE ATT&CK. No immigration sponsorship provided. Estimated total compensation range listed: USD 140000–180000 per year.

Join STRIKE as the engineering counterpart to threat research: own the research-to-production pipeline for detections and feeds, build and maintain platform components (distribution servers, sandbox orchestration, ingestion pipelines, agent runtimes, rules engines), drive STIX/TAXII schema adoption, and ship production systems that leverage language models with retrieval, schema validation, and eval harnesses. Requires hands-on experience with threat intel data, detection tooling (YARA, Sigma, STIX), Python and TypeScript/Node, cloud (AWS), containers, and CI/CD.

Join STRIKE as the engineering counterpart to threat research, owning delivery from research outputs (malware findings, indicators, behavioral patterns) to production artifacts (detection rules, feeds, APIs). The role requires production experience with threat intel data, detection tooling (YARA, Sigma, STIX), cloud and CI/CD infrastructure, and shipping systems that use language models with retrieval, schema validation, and eval harnesses.

Join SecurityScorecard's STRIKE team to own the research-to-production path: implement detection rules, distributed feeds, pipeline hooks, and platform integrations. Requires 5+ years engineering experience with threat intelligence or detection engineering, production experience with Python and TypeScript/Node, familiarity with STIX/TAXII/MISP/MITRE ATT&CK, applied language-model systems experience, and cloud/container/CI-CD knowledge. Remote (Washington, DC). No immigration sponsorship provided. Estimated total compensation range $140,000–$180,000.

Join SecurityScorecard's STRIKE team as the engineering counterpart to threat research, owning the path from research artifacts to production-ready detection rules, distributed feeds, scoring inputs, and platform APIs. Requires 5+ years hands-on engineering experience with threat intelligence or detection engineering, production experience with Python and TypeScript/Node, knowledge of STIX/TAXII/MISP/MITRE, and experience shipping production systems that use language models and large-scale telemetry.