Cybersecurity Threat Intelligence Engineer II – Att@ck

Premera Blue Cross

. Plan and execute authorized adversary emulation, security testing, and technical assessments aligned with MITRE ATT&CK .

Posted 10/31/2026full-timeMountlake Terrace • Washington • United StatesMid-LevelSenior💰 $92,400 - $157,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in adversary emulation, security testing, and technical assessments aligned with MITRE ATT&CK. Proficient in scripting and automation, with a strong understanding of security frameworks and regulatory requirements.

Highest-signal resume keywords

Adversary EmulationMITRE ATT&CK FrameworkSecurity TestingScripting and AutomationIncident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network DesignSystems IntegrationIntrusion DetectionSecurity Configuration ManagementAccess Controls DesignSecurity Policy DevelopmentResults AnalysisThreat Intelligence AnalysisThreat Hunting MethodologiesSecurity Control Validation

Soft Skills

CollaborationCommunicationOrganizational SkillsAnalytical ThinkingProblem Solving

Tools & Technologies

EDRSIEMNetwork Security MonitoringCloud EnvironmentsWindowsLinuxPythonPowerShellBashNetworking Protocols

Certifications & Qualifications

OSCPCRTOGPENGXPNEJPTECPPT

Industry Keywords

CybersecurityHealthcare Regulatory RequirementsHITRUSTPurple Team ExercisesSecurity Control Frameworks

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Plan and execute authorized adversary emulation, security testing, and technical assessments aligned with MITRE ATT&CK
Research emerging adversary tactics, techniques, and procedures and translate threat intelligence into risk-based testing scenarios
Reproduce adversary techniques in approved environments under established rules of engagement
Collect, analyze, and document technical evidence and security telemetry
Evaluate whether defensive controls detected, prevented, or responded to simulated attacker activity
Collaborate with Threat Intelligence and Incident Response teams to recommend improvements and validate remediation
Develop and maintain scripts, automation, and repeatable testing procedures
Analyze testing results and trends in detection coverage, control effectiveness, and defensive visibility
Support incident response investigations and technical assessments
Contribute to security assessments involving systems, applications, and networks
Document methodologies, findings, limitations, and recommendations
Communicate results through reports, technical discussions, and briefings
Apply security, privacy, regulatory, and organizational requirements
Organize and prioritize work aligned with team objectives and Purple Team initiatives
Share technical knowledge, lessons learned, and testing insights across the TI&R department

Requirements

What you’ll need

Bachelor’s degree in Information Systems or Business Administration or four (4) years’ experience
Three (3) years’ experience designing, implementing, and troubleshooting networked computer systems
Experience with systems integration, hardware requirements, network design planning, and vendor negotiations for hardware and software
Two (2) years’ experience with secure network and systems architecture, design and implementation, intrusion detection, defense and incident response, security configuration management, access controls design and implementation, and security policy and standards development
Industry-recognized offensive cybersecurity or adversary emulation certifications preferred, such as OSCP, CRTO, GPEN, GXPN, eJPT, or eCPPT
Hands-on proficiency with the MITRE ATT&CK framework preferred
Experience with adversary emulation, breach and attack simulation, Purple Team exercises, or security control validation preferred
Practical scripting and automation experience using Python, PowerShell, Bash, or similar languages preferred
Experience with repeatable security testing scenarios, results analysis, and follow-up validation preferred
Hands-on experience with EDR, network security monitoring, SIEM, identity, and cloud environments preferred
Working knowledge of Windows and Linux, authentication technologies, networking protocols, and attacker behaviors preferred
Familiarity with threat intelligence analysis and threat hunting methodologies preferred
Familiarity with security control frameworks and healthcare regulatory requirements, including HITRUST, preferred

Benefits

Comp & perks

Medical, vision, and dental coverage with low employee premiums
Voluntary benefits, including pet insurance
Life and disability insurance
401K employer match
Pension plan vested after 3 years of service
Wellness incentives, including counseling, stress management, and mindfulness programs
Generous paid time off
Tuition assistance for undergraduate and graduate degrees
Employee recognition program
Hybrid on-campus flexibility with access to on-site resources, networking opportunities, and team engagement
Commuter perks
Free on-site parking
Subsidized on-campus cafes
On-site health and wellness activities
Fitness and well-being center with in-person and virtual workouts and nutritional counseling
On-campus shuffleboard and ping pong