Security Engineer, Cyber Threat Intelligence

About the role

Saronic Technologies is seeking a hands‑on Security Engineer to lead its Cyber Threat Intelligence program. You will translate raw threat indicators into actionable defenses, working across security operations, detection engineering, vulnerability management, and more to protect autonomous maritime platforms.

Key responsibilities

• Define and evolve Priority Intelligence Requirements and collection frameworks aligned with maritime‑autonomy threat models.
• Track nation‑state, APT, and advanced criminal adversaries, maintaining detailed profiles of tooling, infrastructure, and tradecraft.
• Operationalize indicators and TTPs into detections, hunts, and remediation pipelines, ingesting commercial feeds and OSINT.
• Fuse external intelligence with internal telemetry in a graph‑based store, performing attack‑path and identity‑to‑asset correlation.
• Produce concise, actionable intelligence briefings using STIX, MITRE ATT&CK, and structured analytic techniques.
• Develop and run intelligence‑driven threat hunts across endpoint, cloud, identity, email, and network data, authoring durable detections (Sigma, YARA).
• Conduct infrastructure and malware analysis, including passive DNS pivoting.

Required profile

• Strong analytical mindset with experience in threat intelligence and detection engineering.
• Ability to translate complex technical data into clear, actionable recommendations for leadership.
• Proactive, detail‑oriented, and comfortable collaborating across multidisciplinary security teams.

Required skills

• STIX
• MITRE ATT&CK
• Sigma
• YARA
• Passive DNS