Senior Threat Intelligence Engineer

About the role

Join Coalition’s Threat Intelligence team to identify emerging vulnerabilities and exploitation activity before they impact policyholders. You will lead key parts of the Zero‑Day Alert process and build detections, honeypots, and first‑party threat intelligence for the Active Insurance platform.

Key responsibilities

• Drive the Zero‑Day Alert process from vulnerability triage to actionable policyholder notification.
• Coordinate urgent outreach with Security Support Center, Underwriting, and Incident Response for high‑severity vulnerabilities.
• Write and refine technology fingerprints, detection rules, and security findings.
• Maintain and expand the distributed honeypot network, analyzing telemetry for exploitation.
• Improve detection accuracy using claims insights, external datasets, and vulnerability research.
• Publish advisories, research, and briefings that inform security decisions.
• Participate in the on‑call rotation for emergency notifications.

Required profile

• 5+ years in threat intelligence, vulnerability research, pen testing, or defensive security engineering.
• Deep knowledge of network protocols, operating systems, web applications, and exploitation techniques.
• Experience assessing new vulnerabilities under time pressure and translating them into practical risk signals.
• Strong communication skills for both technical and non‑technical audiences.

Required skills

• Python programming.
• SQL querying.
• Writing scanner detections, signatures, and parsing scripts (regex, protocol fingerprints).
• Experience with honeypots, deception technologies, and large security datasets.
• Familiarity with tools such as Censys, Shodan, BinaryEdge.

What we offer

• 100% medical, dental and vision coverage.
• Flexible PTO policy.
• Annual home office stipend and WeWork access.
• Mental and physical health wellness programs.
• Competitive compensation and advancement opportunities.