← All roles

Senior Threat Intelligence Engineer

Cloudflare· Security
Apply on company site
Hybrid (Austin, US)Posted 8mo ago

About the role

Hybrid role at Cloudflare combining Threat Intelligence (TI) with Machine Learning and security engineering to transform threat data into actionable defenses, reduce MTTD/MTTR, and integrate TI practices into CI/CD and security operations.

Responsibilities

  • Intelligence Collection & Analysis: Proactively research, collect, and analyze threat intelligence from various sources (OSINT, commercial feeds, dark web, and internal security events) to understand the current and emerging threat landscape.
  • Machine Learning and Data Science: Design, implement, and maintain detection use cases for the entire machine learning lifecycle (data ingestion, training, deployment, and inference).
  • Threat Actor Profiling: Develop detailed profiles of relevant threat actors, their TTPs using MITRE ATT&CK, and identify potential impacts to the organization.
  • Actionable Intelligence Dissemination: Produce and disseminate timely, relevant, and actionable intelligence reports and briefings for technical security teams and executive leadership.
  • IOC/IOA Management: Engineer ingestion, enrichment, correlation, and contextualization of IOCs and IOAs into security platforms.
  • Automated Defense Development: Design, develop, and implement robust automation workflows and playbooks (SOAR) to streamline security operations tasks.
  • Tool Integration & Optimization: Integrate diverse security tools (SIEM, EDR, Cloud Security Posture Management, vulnerability scanners, TIPs) via APIs and scripting (Python) for automated feedback loops.
  • Process Improvement: Identify manual, repetitive processes and engineer scalable automation solutions to increase efficiency.
  • Incident Response Support: Provide threat context to support the Incident Response team during active security incidents.
  • Cross-Functional Partnership: Collaborate with Detection Engineers, Security Engineers, and Software Developers to embed security and intelligence-driven practices into the CI/CD pipeline and infrastructure.

Qualifications

  • 4+ years of hands-on experience in a Security Engineering, Cyber Threat Intelligence, or Security Automation role.
  • Strong proficiency in at least one scripting/programming language for automation (e.g., Python).
  • Security Concepts: Deep understanding of the cyber kill chain, threat actor TTPs, common attack vectors, networking protocols, and OS internals.
  • Automation Expertise: Experience designing and implementing SOAR playbooks and integrating security tools via APIs.
  • Intelligence Tools: Experience working with commercial and open-source Threat Intelligence Platforms (TIPs) and threat feeds.
  • Cloud Security: Familiarity with security services and automation in major cloud environments (AWS, Azure, or GCP).
  • Experience with Infrastructure-as-Code (IaC) tools like Terraform.
  • Familiarity with data analysis and visualization tools for threat intelligence.
  • Experience with malware analysis and reverse engineering to extract actionable indicators.
  • Ability to navigate ambiguity, work autonomously with urgency, ownership, and self-drive.
  • Ability to build partnerships and communicate risk, urgency, and feedback to stakeholders.
  • Experience threat hunting in complex networks.
  • Ability to read attack briefs or vulnerability reports and contextualize risk.
  • Ability to validate vulnerability reports and provide impact analysis.
  • Experience with security event information in intelligence analysis.

Skills

Required:Threat IntelligencePythonMITRE ATT&CKSOAR
Nice to have:Threat Hunting

Benefits

  • Health & Welfare Benefits: Medical/Rx Insurance, Dental Insurance, Vision Insurance, Flexible Spending Accounts, Commuter Spending Accounts, Fertility & Family Forming Benefits, On-demand mental health support and Employee Assistance Program, Global Travel Medical Insurance
  • Financial Benefits: Short and Long Term Disability Insurance, Life & Accident Insurance, 401(k) Retirement Savings Plan, Employee Stock Participation Plan
  • Time Off: Flexible paid time off covering vacation and sick leave, Leave programs including parental, pregnancy health, medical, and bereavement leave
Last updated Aug 26, 2026. Interested? Apply on the company site.

About Cloudflare

Connect, protect, and build everywhere | Cloudflare

Make employees, applications and networks faster and more secure everywhere, while reducing complexity and cost.

NetworkingSecurityPerformanceDeveloper PlatformAI
Company profileWebsite

More open roles at Cloudflare