[Hiring] Staff Security Engineer, Threat Intelligence @Nscale

Role Description

We’re hiring a Staff Security Engineer, Threat Intelligence to build and scale Nscale’s threat intelligence capability and turn adversary insight into actionable security outcomes. This is a high-impact, engineering-driven role focused on connecting external threat intelligence with internal telemetry so that what Nscale knows about attackers directly improves how the company detects and responds. The role works closely with Detection & Response and supports security efforts across infrastructure, cloud, and enterprise systems .

You’ll help strengthen Nscale’s security posture by:

• Tracking relevant threat actors, campaigns, and emerging techniques.
• Translating intelligence into practical detections, defenses, and response improvements.
• Ensuring intelligence is operationalized in the systems and workflows that protect the business.

This role will be part of the global Cyber Defense organization.

What you'll be doing

• Threat Intelligence Analysis
  • Track relevant threat actors, campaigns, and emerging attack techniques tied to Nscale’s environment.
  • Analyze adversary tactics, techniques, and procedures to identify meaningful security implications.
  • Produce actionable threat intelligence tailored to infrastructure, cloud, and enterprise systems.
  • Evaluate external intelligence sources, feeds, and tooling for relevance and quality.
• Detection Engineering & Coverage
  • Translate intelligence into detection logic, SIEM rules, and security controls.
  • Partner with Detection & Response to improve coverage against known adversary behaviors.
  • Maintain mappings to frameworks such as MITRE ATT&CK and identify coverage gaps.
  • Improve defensive visibility by aligning detections to current and emerging threats.
• Systems Integration & Automation
  • Integrate threat intelligence into SIEM pipelines, enrichment systems, and automation workflows.
  • Leverage AI and automation to process large volumes of threat data and surface patterns.
  • Support the use of intelligence data within operational security systems and workflows.
• Incident Support & Communication
  • Support incident response and threat hunting with contextual intelligence and hypothesis generation.
  • Communicate insights, risks, and adversary activity clearly to technical teams and leadership.
  • Enable more effective response playbooks by embedding intelligence into response workflows.

KPIs

• Threat intelligence integrated into SIEM pipelines and automation workflows.
• Detection coverage against known adversary behaviors.
• Coverage gap tracking through MITRE ATT&CK mappings.
• Actionable intelligence produced for infrastructure, cloud, and enterprise systems.

Qualifications

• 8+ years of experience in threat intelligence, security engineering, or detection engineering.
• Strong understanding of threat actors, tactics, techniques, and procedures (TTPs).
• Experience translating intelligence into detections, rules, or security controls.
• Familiarity with SIEM platforms and detection pipelines.
• Experience with threat intelligence platforms (TIPs) and data formats such as STIX/TAXII.
• Understanding of cloud environments and modern infrastructure.
• Experience leveraging automation or AI/ML techniques for intelligence analysis or enrichment.
• Ability to operate at a Staff level, driving strategy, influencing detection programs, and owning systems.
• Clear communication skills with the ability to share insights and risks with technical teams and leadership.

Nice to have

• Experience in AI infrastructure.
• Threat hunting.
• Incident response.
• SOAR integrations.
• Malware analysis.
• Advanced threat actor tracking.

Benefits

• Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
• Join one of the fastest-growing AI infrastructure companies.
• Dynamic progression plan tailored to your ambitions.
• Human-First Flexibility: A flexible workplace that trusts Nscalers to deliver.