# Security Engineer, Threat Intelligence

**Company:** [Fluidstack](https://hotfix.jobs/companies/fluidstack)
**Location:** New York, NY, San Francisco, CA, Austin, TX
**Role:** Security Engineering
**Salary:** $220k – $280k/yr
**Skills:** Python, Yara, Sigma, SIEM, Malware Analysis, Threat Intelligence, Incident Response, Detection Engineering, Log Analysis, Cloud Security, LLMs, Agentic Tooling
**Posted:** 2026-09-09

> The Security Engineer will track advanced adversaries targeting frontier AI infrastructure, build intelligence pipelines, conduct threat hunts, and create production detections. The role requires hands-on malware and infrastructure analysis, production programming, and close collaboration with detection and incident response teams.

## Job Description

## Responsibilities
- Track nation-state and advanced criminal actors targeting frontier AI infrastructure, translating tooling, infrastructure patterns, and tradecraft into actionable intelligence.
- Build and operate pipelines that collect, enrich, and correlate indicators, integrating intelligence into detection and agentic triage systems.
- Lead intelligence-driven hunts across enterprise, cloud, identity, data center IT, and OT telemetry.
- Convert threat intelligence findings into production-quality detections authored as code.
- Analyze malware, phishing infrastructure, attacker tooling, and logs to extract indicators, TTPs, and attribution signals.
- Curate intelligence from commercial feeds, open sources, government sources, and peer relationships.
- Build and maintain intelligence-sharing relationships with ISACs, peer AI and cloud security teams, and government partners.
- Collaborate with detection engineers and incident responders to produce detections, hunting hypotheses, and incident context.
- Write intelligence products that translate complex campaigns into decisions and next steps for engineers and executives.

## Requirements
- Experience tracking specific nation-state or advanced criminal actors, including their tooling, infrastructure, and targeting.
- Production-quality Python or a similar programming language, with experience building automation and data pipelines end to end.
- Hands-on malware, infrastructure, and log analysis experience.
- Experience authoring production detection logic using YARA, Sigma, or SIEM-native queries.
- Experience partnering with detection engineering and incident response teams during active events.
- Strong written communication and ability to produce actionable intelligence.

## Nice-to-haves
- Active threat intelligence community network and experience sharing intelligence.
- Experience defending large-scale GPU or AI compute infrastructure, data centers, or multi-tenant cloud environments.
- Experience applying LLMs or agentic tooling to collection, enrichment, and analysis.
- Public research, conference talks, or open-source contributions in cyber threat intelligence.

## Compensation and Benefits
- Base salary: $200,000–$280,000 per year, depending on experience, skills, qualifications, and location.
- Competitive total compensation may include equity in the form of stock options.
- Retirement or pension plan, health, dental, and vision insurance.
- Generous paid time off.

## Similar jobs

- [Security Infrastructure Engineer](https://hotfix.jobs/jobs/4fdd0d88-bc0e-472a-9297-61325d796d51) - Tailscale - Remote - CA$218k – CA$273k/yr
- [Red Team Specialist - Cyber](https://hotfix.jobs/jobs/9bb5b4f5-abe4-4fc7-8226-8810777d7d5d) - OpenAI - San Francisco, CA - $198k – $320k/yr
- [Software Engineer, Trust & Safety](https://hotfix.jobs/jobs/ccbdc9a4-a902-479b-845f-0d13a50d97a0) - Vercel - San Francisco, CA - $196k – $294k/yr
- [Manager, Security Incident Response](https://hotfix.jobs/jobs/fe4d4111-7237-4acc-be44-fce689acc71f) - 1Password - Remote - $192k – $278k/yr
- [Governance, Risk, and Compliance Manager - Privacy](https://hotfix.jobs/jobs/a5153f89-2b1c-40d2-b939-13b82952a049) - Decagon - San Francisco, CA - $190k – $275k/yr

**Apply:** https://hotfix.jobs/jobs/a9d333c0-2242-416f-a470-d3a19f982046
**Canonical:** https://hotfix.jobs/jobs/a9d333c0-2242-416f-a470-d3a19f982046