{"id":1374248,"url":"https://alion.io/job/cme-group-cyber-threat-intelligence-engineer-iii-tactical","title":"Cyber Threat Intelligence Engineer III (Tactical)","company":{"id":33863,"name":"CME Group","domain":"cmegroup.com","url":"https://alion.io/company/cmegroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15000,"max_usd":37000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"Diamond Model","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-28T05:58:20Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-11-02T13:21:20Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"Description:\nThe CTI Level III Tactical Engineer is responsible for building automations to assist with the day-to-day CME Group tactical threat intelligence activities and operations including analysis, collection, and dissemination of threat intelligence products. This role will primarily focus on building automations, and leveraging AI in order to support the larger Cyber Defense team and streamline Cyber Threat Intelligence processes.\nKey responsibilities include:\nLeverage a mix of AI and automations to streamline Cyber Threat Intelligence processes\n\nCoordinate with security operations and incident response staff to tune and improve detection capabilities or to aid in investigations or respond to incidents\n\nConsume and analyze threat intelligence reports in order to assist in the creation of signatures, queries, or other analytics that will be deployed for detection and prevention purposes\n\nAnalyze new vulnerabilities for potential impact and attack vectors\n\nBasic Qualifications:\n3+ years of experience in the field of information security, computer science, computer forensics, or information assurance\n\nFamiliarity with AI and mechanisms of integrating AI into workflows.\n\nFamiliar with the MITRE ATT&CK framework\n\nExperience with collecting, analyzing, and interpreting threat intelligence data from multiple sources\n\nExperience with cyber incident response and digital forensics, security engineering, security operations, computer network operations, information operations, information warfare, or topical cyber\n\nIntermediate knowledge of Cyber threat intelligence processes and tradecraft to include the Cyber Kill Chain and Diamond Model of Intrusion Analysis\n\nExperience with multiple scripting languages, including Python and PowerShell.\n\nFamiliar with Linux operating system, including using the Linux terminal\n\nExperience with key security operations technologies such as SIEM and log aggregation\n\nExperience with host and network log sources to apply to investigation, IR methodology in investigations, and the groups behind targeted attacks and tactics, techniques, and procedures (TTPs)\n\nKnowledge of attacker tactics, techniques, and procedures and common attack vectors and vulnerabilities\n\nBA or BS degree in Computer Science, Cyber Security, or related field\n\nAdditional Qualifications:\nExperience with performing advanced static and dynamic malware analysis and with setting up and leveraging automated malware analysis platforms\n\nPossession of excellent oral and written communication skills\n\nExperience working in an Intelligence Community or similar intelligence experience.\n\nExperience working in cloud environments\n\nFormal Education & Certifications\nBA/BS in Computer Science, Cyber Security, or related field or related work experience\n\nGIAC Python Coder (GPYC), GIAC Security Essentials (GSEC), GIAC Certified Enterprise Defender (GCED), other relevant GIAC Certification, or other technical industry certifications\n\nThreat Intelligence Courses\n\nCME Group: Where Futures are Made\nCME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.\nAt CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.\nImportant Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.","description_format":"text","description_chars":4045,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Stock Exchanges & Market Infrastructure","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-09-28T05:58:20Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.802,"p_room":0.55,"age_days":35,"expected_fill_days":33,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/cme-group-cyber-threat-intelligence-engineer-iii-tactical","json_url":"https://alion.io/job/cme-group-cyber-threat-intelligence-engineer-iii-tactical.json","meta":{"generated_at":"2026-11-02T14:37:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20230,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":33863},"rest":"https://alion.io/mcp/rest/get_company?id=33863"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcme-group-cyber-threat-intelligence-engineer-iii-tactical"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcme-group-cyber-threat-intelligence-engineer-iii-tactical"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcme-group-cyber-threat-intelligence-engineer-iii-tactical"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cme-group-cyber-threat-intelligence-engineer-iii-tactical\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcme-group-cyber-threat-intelligence-engineer-iii-tactical"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1374248}},{"tool":"search_jobs","arguments":{"company":"cmegroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1374248},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}