{"id":3748241,"url":"https://alion.io/job/brmi-cyber-threat-engineer-2","title":"Cyber Threat Engineer","company":{"id":4422694,"name":"BRMi","domain":"brmi.com","url":"https://alion.io/company/brmi-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vienna, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":113000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-11-04T14:17:01Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T10:23:20Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nBRMi is seeking a Cyber Threat Engineer to support the core functions of the Threat Intelligence and Emerging Risk (TIER) team. This position will provide dedicated engineering capacity to develop, automate, integrate, and maintain the tools and processes TIER analysts use for threat hunting and operationalizing threat intelligence.\nThe role will support threat intelligence ingestion and enrichment workflows, automated data processing, YARA and SIGMA rule development, technical integrations, and reusable threat-hunting capabilities.\nThe Cyber Threat Engineer is a mid-level cybersecurity engineering role responsible for developing and maintaining the tools, automation, integrations, and technical processes that support TIER threat intelligence and threat-hunting activities. Working from TIER-defined requirements, the engineer will independently design, test, document, and maintain reusable technical solutions. The position enables threat analysis and hunting through engineering rather than serving as the primary threat analyst.\nBenefits:\nComprehensive Medical, Dental, and Vision Insurance\nEmployer-Paid Life Insurance\nEmployer-Paid Short-Term and Long-Term Disability Insurance\n401(k)\nPaid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays\nEducational Assistance\nSalary: $$113-130K\nHybrid in Vienna, VA 3 days per week.\n**An In Person interview will be required for this role**\nClick here to learn about BRMi's culture.\nClick here to see BRMi’s Glassdoor reviews\nResponsibilities\nDevelop and maintain tools, scripts, and automated workflows that enable TIER threat-hunting and intelligence operations.\nBuild repeatable processes for collecting, ingesting, enriching, transforming, and operationalizing threat intelligence data.\nDevelop, test, document, and maintain YARA rules and supporting detection processes.\nCreate Python-based utilities and script automation that reduce manual effort and improve workflow scalability.\nTranslate analyst requirements into technical solutions, integrations, automated processes, and reusable capabilities.\nApply the MITRE ATT&CK framework when developing threat-hunting tools, detections, and supporting processes.\nIntegrate internal and external threat intelligence sources into TIER workflows and supporting tools.\nValidate and perform quality assurance for tools, scripts, rules, integrations, and automation before operational use.\nTroubleshoot and maintain TIER tools, data pipelines, integrations, and automated workflows.\nMaintain technical documentation and procedures needed to sustain developed capabilities.\nQualifications\nBachelor's degree in cybersecurity, computer science, information technology, information systems, engineering, or a related technical discipline preferred; relevant experience may be considered in lieu of a degree.\nMaster's degree in cybersecurity, information assurance, computer science, or a comparable technical discipline strongly preferred; comparable advanced technical qualifications or demonstrated expertise may be considered.\nDemonstrated experience in cybersecurity engineering, security automation, or threat engineering.\nDirect experience supporting Cyber Threat Intelligence or threat-hunting function required.\nDemonstrated experience with Python (3+ years), script-based automation, and YARA and SIGMA rule development.\nPractical experience applying the MITRE ATT&CK framework to cybersecurity or threat-hunting use cases.\nSecurity+, CySA+, GCIH, GCIA, or comparable cybersecurity certifications preferred, but not required.\nKey Skills\nStrong cybersecurity engineering, automation, troubleshooting, and technical problem-solving skills.\nAbility to translate analyst requirements into reliable, reusable, and maintainable technical solutions.\nAbility to independently develop, test, document, and maintain scripts, integrations, automation, and supporting processes.\nUnderstanding of threat intelligence and threat-hunting concepts and workflows.\nEffective communication and collaboration with threat analysts and defensive cybersecurity partners.\nStrong attention to quality, repeatability, maintainability, and documentation.\nExpected Contribution\nThis position will provide dedicated engineering support for TIER's core threat intelligence and threat-hunting functions rather than primary ownership of threat analysis. The engineer will convert analyst requirements into scalable tools, rules, integrations, and automated processes that improve operational efficiency and consistency. This capacity will reduce the technical workload carried by TIER analysts and support continued expansion of the team's threat-hunting capabilities.\n** BRMi will not sponsor applicants for work visas for this position.**\n**This is a W2 opportunity only**\nEOE/Minorities/Females/Vet/Disabled\nWe are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.","description_format":"text","description_chars":5480,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Software Testing & QA","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-04T14:17:01Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":true},"html_url":"https://alion.io/job/brmi-cyber-threat-engineer-2","json_url":"https://alion.io/job/brmi-cyber-threat-engineer-2.json","meta":{"generated_at":"2026-11-05T12:51:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16592,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422694},"rest":"https://alion.io/mcp/rest/get_company?id=4422694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrmi-cyber-threat-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrmi-cyber-threat-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrmi-cyber-threat-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brmi-cyber-threat-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrmi-cyber-threat-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3748241}},{"tool":"search_jobs","arguments":{"company":"brmi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3748241},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}