Threat Intelligence Engineer (Cybersecurity)

TL;DR

Threat Intelligence Engineer (Cybersecurity): Researching and analyzing threat data to protect the enterprise and its software supply chain with an accent on IOC pipeline maintenance and adversary tradecraft. Focus on monitoring open-source package registries and integrating intelligence artifacts with SIEM/EDR platforms.

Location: Belfast

Company

hirify.global is a pioneer in application security providing SAST, SCA, and DAST solutions to maximize security and quality in DevSecOps.

What you will do

• Collect, process, and analyze threat data across the full intelligence production lifecycle.
• Draft threat actor profiles, campaign summaries, and indicator packages for technical audiences.
• Ingest, validate, and score Indicators of Compromise (IOCs) using STIX 2.1 from commercial and open-source feeds.
• Integrate IOC pipelines with SIEM and EDR platforms, specifically Sumo Logic and CrowdStrike Falcon.
• Monitor open-source package registries (npm, PyPI, Go, Maven) for adversarial activity like typosquatting and dependency confusion.
• Support CSIRT, Vulnerability Management, and PSIRT with alert triage, threat research, and DLP investigation enrichment.

Requirements

• At least 2 years of experience in threat intelligence, security operations, or threat hunting.
• Familiarity with the intelligence production lifecycle and ability to apply MITRE ATT&CK for TTP mapping.
• Practical experience running queries and validating detections within enterprise SIEM or EDR environments.
• Conceptual understanding of adversarial techniques targeting open-source ecosystems and build pipelines.
• Strong written and verbal English communication skills.
• Bachelor's degree in computer science, information security, or a related field preferred.