Senior Cyber Intelligence & Operation Engineer

Build a great career with SOCRadar
SOCRadar is poised for continued success with a relentless focus on innovation, global expansion, and feature-rich multifunctionality. Our mission is to empower organizations to stay ahead of evolving cyber threats. Enterprises around the world are increasingly selecting SOCRadar to achieve proactive security by understanding their attack surface and gaining automation-enabled visibility into surface, deep, and dark web. SOCRadar users leverage our expertise and investment in scalable, innovative Extended Threat Intelligence (XTI) solutions to protect their most valuable assets: brand reputation, employees, customers, and overall business operations.
What will
Senior Cyber Intelligence and Operations Engineer do
Senior Cyber Intelligence and Operations Engineer specializing in threat intelligence enablement, delivering end-to-end technical solutions that help customers achieve accurate, noise-free security monitoring while maximizing platform adoption and retention through automation, custom tooling, and proactive intelligence services.
Core Service Areas:
Technical Onboarding & Configuration
Audit and fine-tune customer digital footprints for comprehensive threat surface coverage
Configure and optimize alert rules, detection logic, and DRP (Digital Risk Protection) settings
Design custom monitoring parameters tailored to customer risk profiles and industry requirements
Advise customers on security best practices and platform optimization strategies
Ensure accurate, noise-free monitoring from day one through meticulous configuration management
Develop and deliver technical onboarding documentation and configuration guides
Professional Services & Intelligence Delivery
Enhanced Alert Synthesis: Aggregate, correlate, and contextualize security alerts across multiple sources
Managed Intelligence Services: Provide continuous threat monitoring and analysis as an extension of customer SOC teams
Deep-Dive Analyses: Conduct comprehensive investigations into complex threats, incidents, and adversary campaigns
Digital Footprint Enrichment: Expand and refine monitored assets through reconnaissance and discovery techniques
VIP Analysis: Deliver executive protection intelligence and targeted threat assessments for high-value individuals
Adaptive Threat Reports: Generate customized intelligence products that evolve with changing threat landscapes and customer needs
Customer Retention & Success
Track and analyze platform adoption metrics, user engagement patterns, and feature utilization rates
Monitor customer satisfaction indicators and alarm quality metrics to identify risks proactively
Surface potential churn risks early through data-driven analysis of usage and satisfaction trends
Drive continuous engagement through proactive outreach, optimization recommendations, and value demonstrations
Strengthen customer defenses before issues impact renewal through preventive tuning and enhancement
Develop retention strategies based on customer behavior analytics and feedback loops
AI and Automation Tasks:
Scripting & Development
Develop custom scripts in Python, PowerShell, Bash, and other languages to automate security workflows
Create data parsing, transformation, and enrichment tools for threat intelligence processing
Build integrations between security platforms, SIEM systems, and third-party tools
Design API wrappers and connectors for seamless data exchange and automation
AI Agent Creation
Design and implement AI-powered agents for automated threat analysis and triage
Develop machine learning models for alert prioritization and anomaly detection
Create intelligent chatbots and virtual analysts to enhance customer self-service capabilities
Build LLM-based tools for natural language processing of security data and report generation
Automation Systems Development
Architect end-to-end automation processes for security operations workflows
Design SOAR (Security Orchestration, Automation and Response) playbooks and integrations
Develop automated reporting, notification, and escalation systems
Create self-healing mechanisms and adaptive response systems
Build continuous monitoring and optimization automation for customer environments
Key Deliverables:
Fully optimized customer environments with minimal false positives and comprehensive coverage
Custom-developed scripts, tools, and automation solutions tailored to customer requirements
AI-powered agents and intelligent systems that enhance operational efficiency
Regular threat intelligence reports and strategic security recommendations
Proactive customer engagement strategies that drive retention and platform value
Documented best practices, configuration standards, and technical guides