Threat Intelligence Engineer

Written by the T&S Network from Take-Two Interactive's posting.

Threat intelligence engineering inside a large game publisher's security program, covering threat feed operations, adversary analysis, and turning intelligence into detections and blocks across the company's systems. The role sits in Information Security and reports to the Director of Threat Intelligence, working with the Global Security Operations Center, Detection Engineering, and Incident Response teams.

What you'd do

• Manage threat feeds, parse indicators of compromise, and keep indicator data quality sound across platforms.
• Analyze emerging threats and adversary TTPs to help engineer detection and prevention mechanisms.
• Partner with the GSOC, Detection Engineering, and Incident Response teams to push intelligence into SIEM, EDR, and firewalls.
• Write API integrations, scripts, and playbooks that automate how indicators are ingested, linked, and shared across security tools.
• Help deploy, configure, and tune threat intelligence platforms and related security engineering tools.
• Help write timely alerts, briefs, and tactical reports that give technical teams context on active threats.

What it asks for

• 2-4 years of cybersecurity experience, with at least 1-2 years in threat intelligence, security engineering, or SOC work.
• Solid grasp of network fundamentals, operating system internals, and common attack vectors.
• Experience with APIs and data formats such as JSON, XML, and STIX/TAXII.
• Ability to analyze OSINT, technical reports, and internal logs to identify malicious activity.
• Familiarity with MITRE ATT&CK and the Cyber Kill Chain.
• Hands-on experience with SIEM, TIP, or EDR tools.
• Scripting in Python, PowerShell, or Bash (preferred)

Terms in this role

OSINT.

Open-source intelligence: investigating with publicly available information, such as social media, public records, archived pages and imagery.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Take-Two Interactivenorth_east before you apply. If we got something wrong, report this listing.