Senior Threat Intelligence Engineer

Skills

About the Role

You will monitor and analyze credible threats affecting GitLab and the software supply chain, issue flash reports, and maintain the Threat Intelligence Platform and intelligence-collection pipelines. You will support incident response through malware analysis and threat-actor tracking, collaborate on Purple Team operations, share intelligence with industry peers, and use Python, AI, and automation to improve team processes.

Requirements

• Demonstrate a proven track record of delivering actionable threat intelligence that materially improves organizational security
• Work with a Threat Intelligence Platform and manage ingested and exported threat feeds
• Research adversaries using OSINT and structured analytical techniques
• Automate tasks by writing basic scripts or programs, preferably in Python
• Communicate complex topics clearly and concisely in writing and verbally
• Have optional experience reverse engineering malware, particularly macOS and Linux malware and malware delivered via code repositories
• Have optional public blogs or open-source work related to threat intelligence

Responsibilities

• Monitor the threat landscape and analyze risks relevant to GitLab
• Raise awareness through ad-hoc Flash Reports
• Administer the Threat Intelligence Platform
• Build intelligence collection pipelines using open-source, proprietary, and internal sources
• Support incident response through malware analysis and threat actor tracking
• Collaborate on Purple Team Flash Operations
• Build relationships with industry peers and share intelligence on emerging threats
• Write code, leverage AI, and build automation to improve process efficiency

Benefits

• Benefits supporting health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity compensation
• Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave