Senior Software Engineer / Technical Lead Cyber Security
NEC CorporationMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessLog in to see why each signal reads the way it does.
Job Description
Structured overview of role & requirementsAbout This Role
Lead Cyber Threat Intelligence (CTI) domain expert responsible for AI-driven cybersecurity automation use cases, including CTI data collection, analysis, normalization, enrichment, and quality validation.
Provide technical leadership, mentor and manage junior analysts, guide solution design, and ensure timely delivery of CTI projects supporting AI/ML, LLM/RAG solutions, and cybersecurity analytics.
Collaborate with cybersecurity, data, AI/ML, and engineering teams to translate CTI insights into structured data, detection content, rules, and automation workflows.
Minimum Requirements
4-6 years of experience in Cyber Threat Intelligence, threat research, or related cybersecurity domain.
Strong expertise with CTI frameworks (CTI lifecycle, Diamond Model, Cyber Kill Chain, ACH), MITRE ATT&CK mapping, STIX 2.1/TAXII 2.1, best practices in IoC handling, and TLP 2.0/PAP markings.
Hands-on experience with CTI platforms such as MISP and/or OpenCTI, including APIs, PyMISP, GraphQL, and feed management.
Proficiency in Python (libraries like stix2, PyMISP, taxii2-client, vt-py) and working knowledge of SQL plus security query/search languages (e.g., KQL, SPL, Elastic DSL).
Ideal Candidate Profile
Experienced senior professional with strong analytical, troubleshooting, and data curation skills specialized in CTI focused on applying intelligence frameworks and managing CTI platforms.
Demonstrated ability to lead and mentor teams, design complex automation workflows, and collaborate across cybersecurity and AI/ML domains in hybrid work environments.
Technical proficiency in integrating CTI datasets for AI-driven cybersecurity use cases, with familiarity in detection content standards (YARA, Sigma, Snort, Suricata) and OSINT tradecraft.
