← All roles

Security Engineer, Threat Intelligence

Fluidstack· Security & Corp IT
Apply on company site
New York, NY, San Francisco, CA, Austin, TX, U.S. Remote$220k - $280k + equityFull-timePosted 1mo ago

About the role

Security Engineer focused on threat intelligence for frontier AI infrastructure, building and operating the intelligence program from scratch to enable detection and incident response across enterprise, cloud, identity, data center IT, and OT telemetry.

Responsibilities

  • Track nation-state and advanced criminal actors likely to target frontier AI infrastructure and translate their tooling, infrastructure patterns, and tradecraft into actionable intelligence.
  • Build and run pipelines that collect, enrich, and correlate indicators, feeding the detection and agentic triage stack to operationalize intelligence.
  • Drive intelligence-led hunts across enterprise, cloud, identity, data center IT, and OT telemetry and convert findings into high-fidelity detections authored as code.
  • Perform hands-on malware, phishing-infrastructure, and attacker-tooling analysis to extract indicators, TTPs, and attribution signals for detection engineering and incident response in near real time.
  • Curate inbound intelligence pipeline across commercial feeds, open source, government, and peer relationships, prioritizing material threat-model relevance.
  • Build and maintain external intelligence-sharing relationships (ISACs, peer AI and cloud security teams, government partners) to stay ahead of campaigns.

Qualifications

  • Tracked specific nation-state or advanced criminal actors as a core part of previous roles, with deep knowledge of their tooling, infrastructure, and targeting.
  • Proficient in production-quality Python and building automation/data pipelines end-to-end for intelligence work.
  • Hands-on malware, infrastructure, and log analysis to develop and validate findings.
  • Authored quality detection logic (YARA, Sigma, or SIEM-native queries) deployed to production and robust against adversary activity.
  • Collaborated with detection engineers and incident responders to turn intelligence into detections and live-hunting context.
  • Able to distill complex campaigns into actionable decisions and next steps for engineers or executives.

Skills

Required:PythonThreat intelligenceMalware analysisDetection engineering

Benefits

  • Competitive total compensation package (salary + equity).
  • Retirement or pension plan (local norms).
  • Health, dental, and vision insurance.
  • Generous PTO policy (local norms).
Last updated Oct 20, 2026. Interested? Apply on the company site.
Fluidstack logo

About Fluidstack

Fluidstack builds civilization-scale infrastructure for AI

Fluidstack builds civilization-scale infrastructure for AI, delivering gigawatts of compute in 6 months. We're leading the deployment of Anthropic's $50B compute build out.

AI infrastructurecompute centershardwaresoftwarepowerdata centersAnthropicfrontier compute

More open roles at Fluidstack