Senior Threat Intelligence Engineer

Coalition Technologies

. Identify emerging vulnerabilities and exploitation activity before they cause loss for policyholders .

Posted 11/3/2026full-timeRemote • CanadaSenior💰 CA$106,700 - CA$190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence, vulnerability research, and defensive security engineering, with strong capabilities in Python and SQL for developing detection rules and analyzing security data. Proven ability to communicate effectively with diverse audiences and lead complex security initiatives independently.

Highest-signal resume keywords

Threat IntelligenceVulnerability ResearchPython ProgrammingSQL SkillsHoneypot Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentDetection Rule WritingNetwork ProtocolsOperating Systems KnowledgeWeb Application ExploitationScanner DetectionsSignature WritingParsing ScriptsDeception TechnologyRisk Translation

Soft Skills

Excellent CommunicationClear DocumentationIndependent Leadership

Tools & Technologies

CensysShodanBinaryEdgeVPNsFirewallsLoad BalancersSCADA/ICS

Industry Keywords

Cyber InsuranceUnderwritingRisk Aggregation ModelingZero-Day Alert ProcessIncident Response

Tech Stack

Tools & technologies

FirewallsPythonSQL

About the role

Key responsibilities & impact

Identify emerging vulnerabilities and exploitation activity before they cause loss for policyholders
Lead key parts of the Zero-Day Alert process and build detections, honeypots, and first-party threat intelligence
Drive the Zero-Day Alert process from vulnerability triage to actionable policyholder notification
Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities
Write and refine technology fingerprints, detection rules, and security findings that turn scan data into reliable risk signals
Maintain and expand the distributed honeypot network, analyzing telemetry for exploitation and new adversary techniques
Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research
Publish advisories, research, and briefings that inform security decisions
Participate in the on-call rotation for emergency notifications
Work across Security, Underwriting, Incident Response, Product, and Data Engineering

Requirements

What you’ll need

5+ years in threat intelligence, vulnerability research, pen testing, or defensive security engineering
Deep knowledge of network protocols, operating systems, web apps, and exploitation (RCE, auth bypass, edge-device vulnerabilities)
Experience assessing new vulnerabilities under time pressure and translating them into practical enterprise risk
Hands-on experience writing scanner detections, signatures, or parsing scripts (Python, regex, protocol fingerprints)
Experience with honeypots, deception tech, or internet-wide scanning and other large security datasets
Strong Python and SQL skills
Excellent communication with both technical and non-technical audiences
A track record of clear documentation or public security writing, plus the judgment to lead complex work independently
Bonus: Experience with Censys, Shodan, BinaryEdge, or attack surface mapping
Bonus: Reverse engineering, patch diffing, or PoC exploit verification
Bonus: Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS
Bonus: Public research, CVE credits, or conference talks
Bonus: Knowledge of cyber insurance, underwriting, or risk aggregation modeling

Benefits

Comp & perks

100% medical, dental, and vision coverage
Flexible PTO
Annual home office stipend and WeWork access
Mental & physical health wellness programs like Headspace, Lumino, and more!
Competitive compensation and opportunity for advancement
Remote-first culture