Cyber Threat Engineer

CMMI

. Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.

Posted 11/4/2026full-timeVienna • Virginia • United StatesMid-LevelSenior💰 $113,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining automated workflows and tools for threat intelligence operations, with a strong focus on Python scripting, YARA rule development, and applying the MITRE ATT&CK framework. Capable of translating analyst requirements into scalable technical solutions while ensuring quality and maintainability.

Highest-signal resume keywords

Python DevelopmentYARA Rule DevelopmentMITRE ATT&CK Framework ApplicationCyber Threat Intelligence SupportSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity EngineeringScript-Based AutomationThreat EngineeringQuality AssuranceTechnical Problem-Solving

Soft Skills

Effective CommunicationCollaborationAttention to Quality

Tools & Technologies

TIER ToolsData PipelinesAutomated Workflows

Certifications & Qualifications

Security+CySA+GCIHGCIA

Industry Keywords

Threat IntelligenceThreat-HuntingCybersecurityAutomationTechnical Documentation

Tech Stack

Tools & technologies

Cyber SecurityPython

About the role

Key responsibilities & impact

Develop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.
Build repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.
Develop, test, document, and maintain YARA rules and supporting detection processes.
Create Python-based utilities and script automation that reduce manual effort and improve workflow scalability.
Translate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.
Apply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.
Integrate internal and external threat intelligence sources into TIER workflows and supporting tools.
Validate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.
Troubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.
Maintain technical documentation and procedures needed to sustain developed capabilities.
Provide dedicated engineering support for TIER's core threat intelligence and threat-hunting functions rather than primary ownership of threat analysis.
Convert analyst requirements into scalable tools, rules, integrations, and automated processes that improve operational efficiency and consistency.

Requirements

What you’ll need

Bachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.
Master's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.
Demonstrated experience in cybersecurity engineering, security automation, or threat engineering.
Direct experience supporting Cyber Threat Intelligence or threat-hunting function required.
Demonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.
Practical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.
Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.
Strong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.
Ability to translate analyst requirements into reliable, reusable, and maintainable technical solutions.
Ability to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.
Understanding of threat intelligence and threat-hunting concepts and workflows.
Effective communication and collaboration with threat analysts and defensive cybersecurity partners.
Strong attention to quality, repeatability, maintainability, and documentation.
BRMi will not sponsor applicants for work visas for this position.
This is a W2 opportunity only.

Benefits

Comp & perks

Comprehensive Medical, Dental, and Vision Insurance
Employer-Paid Life Insurance
Employer-Paid Short-Term and Long-Term Disability Insurance
401(k)
Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
Educational Assistance