Counter-Threat Intelligence Engineer (Cybersecurity)

Location: Remote-first work environment; remote employees must have a cable or fiber-optic broadband connection with at least 10 Mbps download and 5 Mbps upload.

Company

hirify.global operates within Cambium Learning Group, an education technology organization serving learners, educators, associates, platforms, data, and business operations.

What you will do

• Collect, analyze, and operationalize strategic, tactical, and operational threat intelligence, including indicators of compromise, adversary tactics, techniques, procedures, emerging vulnerabilities, and targeted threat activity.
• Conduct authorized adversary-focused research and ethical hacking to validate exposures, identify attack paths, and recommend defensive improvements across endpoints, cloud services, applications, identity platforms, networks, and third-party integrations.
• Partner with Security Operations to create, tune, and validate detections, playbooks, threat-hunting hypotheses, and response workflows across SIEM, XDR, EDR, vulnerability management, and related security tools.
• Support Continuous Threat Exposure Management by scoping assets, discovering exposures, prioritizing findings by business risk, validating exploitability, and coordinating remediation.
• Produce actionable threat intelligence reports, briefings, technical recommendations, detection guidance, and remediation advice for security analysts, senior leadership, and cross-functional stakeholders.
• Support incident response through alert enrichment, malware and phishing analysis, infrastructure research, attack timeline reconstruction, and lessons learned.

Requirements

• 5+ years of progressive cybersecurity experience, including at least 2 years in threat intelligence, ethical hacking, penetration testing, detection engineering, security operations, incident response, vulnerability management, or a closely related role.
• Working knowledge of the cyber kill chain, MITRE ATT&CK, common attack techniques, malware and phishing behaviors, cloud and identity threats, vulnerability exploitation, attacker infrastructure, and defensive countermeasures.
• Hands-on experience with SIEM, XDR/EDR, vulnerability scanners, threat intelligence platforms, cloud security tools, identity logs, endpoint telemetry, network telemetry, and ticketing or workflow platforms.
• Ability to write clear threat intelligence summaries, detection recommendations, executive briefings, remediation guidance, and technical documentation for cross-functional teams.
• Experience conducting authorized security testing, adversary emulation, attack surface analysis, detection validation, or threat hunts in a disciplined, evidence-based, policy-aligned manner.
• High judgment, strong ethics, discretion with sensitive information, collaborative communication, and commitment to protecting confidential, proprietary, student, customer, associate, and business data.

Nice to have

• Certified Ethical Hacker (CEH) certification; OSCP, GPEN, CompTIA PenTest+, CPENT, eJPT, GCTI, CTIA, or equivalent practical experience may also be considered.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent professional experience and certifications may be considered.
• Experience in education technology, SaaS, cloud-first, remote-first, or regulated environments.
• Experience building threat-hunting content, Sigma/YARA rules, KQL/SPL queries, detection-as-code, or automation for enrichment and triage.
• Familiarity with Python, PowerShell, Bash, APIs, or SOAR-style workflows.
• Working knowledge of data privacy, secure software development, third-party risk, and ISO 27001, SOC 2, NIST CSF, or NIST SP 800-series guidance.

Culture & Benefits

• Remote-first work environment with flexibility to work remotely occasionally or permanently.
• Work is collaborative and inclusive, with success measured by results regardless of individual location.
• Remote office setup reimbursement is available.
• Ongoing virtual meetings require active video participation with the camera on.
• Reasonable accommodations are available for qualified individuals with disabilities.

Hiring process

• Participate in video-based interviews with the camera on.
• Use of note-taking tools, reference materials, or AI-powered tools during interviews and selection activities is prohibited unless approved in writing in advance.
• Medical, accessibility, or other accommodations can be discussed with the Talent Acquisition team before the process.