{"id":3532122,"url":"https://alion.io/job/icounter-senior-collections-data-engineer-us-remote","title":"Senior Collections Data Engineer (US-Remote)","company":{"id":2146362,"name":"iCOUNTER","domain":"icounter.com","url":"https://alion.io/company/icounter","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Data Science","role_family":"Data Science","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":140000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Apache Kafka","optional":false},{"name":"AutoGen","optional":false},{"name":"ClickHouse","optional":false},{"name":"CrewAI","optional":false},{"name":"Dagster","optional":false},{"name":"dbt","optional":false},{"name":"Docker","optional":false},{"name":"DuckDB","optional":false},{"name":"FastAPI","optional":false},{"name":"Flask","optional":false},{"name":"Flink","optional":false},{"name":"Kubernetes","optional":false},{"name":"LangChain","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"Snowflake","optional":false},{"name":"Spark","optional":false}],"status":"live","first_seen_at":"2026-10-30T13:55:51Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-02T20:38:34Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About iCOUNTER\niCOUNTER is redefining how enterprises defend against cyber threats originating across their extended business ecosystems. \nOur AI-native Counter Threat Operating System (CTOS™) combines threat intelligence, risk determination, and operational response to help organizations identify and act on threats involving third parties, subsidiaries, portfolio companies, and interconnected business relationships. \nWe believe enterprises need to move beyond traditional risk assessments and static security scores toward intelligence-led, proactive defense. \nWe’re building a new category of cybersecurity, and we’re looking for exceptional talent to help us bring it to market.\nTHE OPPORTUNITY\nWe are looking for a Senior Software Engineer / Data Engineer to join our Threat Intelligence Collections team. You will design, build, and operate large-scale data collection systems that gather, enrich, and deliver high-fidelity threat intelligence from the open web, deep web, and dark web sources. This is a high-impact, technically challenging role at the intersection of cybersecurity, data engineering, and modern AI-driven automation.\nYou will own the full lifecycle of threat data pipelines - from raw source ingestion to clean, structured, and queryable intelligence that powers our detection, hunting, and response capabilities.\nWHAT YOU'LL DO\nDesign and scale high-volume data collection systems that ingest threat data from open-web, deep-web, and dark-web sources (including Tor, I2P, and other anonymity networks).\n\nBuild and maintain robust, fault-tolerant data pipelines (batch + streaming) for ingestion, transformation, enrichment, and storage.\n\nDevelop advanced data parsing and normalization logic for unstructured, semi-structured, and rapidly evolving threat data formats\n\nDesign, build, and maintain agentic workflows - autonomous, LLM-powered agents that can reason, adapt, and execute multi-step collection and enrichment tasks.\n\nArchitect and operate high-scale media pipelines for ingesting, processing, storing, and enriching large volumes of media content (images, videos, screenshots, documents, etc.) collected from threat intelligence sources.\n\nDesign and build internal and external APIs that expose collected intelligence to downstream security teams and platforms.\n\nWrite clean, production-grade Python code as the primary language for all data engineering and automation work.\n\nCollaborate closely with threat intelligence analysts, detection engineers, and security researchers to translate intel requirements into reliable, scalable data systems.\n\nMonitor, troubleshoot, and continuously optimize collection performance, data quality, and latency at scale.\n\nStay current with emerging threat actor TTPs, data sources, and evasion techniques to proactively improve collection coverage.\n\nWHAT YOU'LL NEED\n5+ years of experience as a Software Engineer or Data Engineer, with a strong focus on large-scale data collection and processing.\n\nDeep experience collecting data at scale from open and dark web sources (scraping, crawling, API integration, Tor-based collection, anti-detection/anti-bot techniques).\n\nStrong expertise in building and operating data pipelines (Airflow, Dagster, Prefect, Spark, Kafka, Flink, or equivalent).\n\nAdvanced data parsing skills - experience turning messy, unstructured web data into clean, structured intelligence.\n\nExpert-level Python proficiency (including async, concurrency, and performance optimization).\n\nHands-on experience designing and implementing agentic workflows (LangChain, CrewAI, AutoGen, LlamaIndex, or similar frameworks) and integrating LLMs into production data systems.\n\nTrack record of building and maintaining production APIs (FastAPI, Flask, or similar).\n\nStrong understanding of cybersecurity concepts and threat intelligence data types (IOCs, TTPs, malware samples, phishing kits, underground forums, etc.).\n\nComfortable working in a fast-paced, ambiguous environment with high-stakes data quality requirements.\n\nWHAT WE ARE LOOKING FOR\nExperience with cloud platforms.\n\nKnowledge of modern data stack tools (dbt, Snowflake, ClickHouse, DuckDB, etc.).\n\nFamiliarity with containerization (Docker, Kubernetes) and infrastructure-as-code.\n\nPrior work in cybersecurity, threat intelligence, or intelligence collection organizations.\n\nContributions to open-source tools or public research in the threat intel or data collection space.\n\nBenefits & Perks:\nFull Health, Dental, & Vision Coverage, with 100% employee premiums covered and 90% dependent premiums covered on base plans\n\n401(k), HSA, & FSA Plans\n\nFlexible PTO\n\nMeaningful equity ownership\n\nCompany Holidays & Paid Sick Days\n\nMonthly home-office stipend for internet, equipment, or other technology needs\n\niCOUNTER is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. iCOUNTER provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.\nAccommodation: If you need accommodations, reach out to .\nCompletion of a Background Check is required for employment at iCOUNTER","description_format":"text","description_chars":5449,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Threat Intelligence","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T16:24:41Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":53,"reasons":["conf:3","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/icounter-senior-collections-data-engineer-us-remote","json_url":"https://alion.io/job/icounter-senior-collections-data-engineer-us-remote.json","meta":{"generated_at":"2026-11-02T23:49:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33358,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2146362},"rest":"https://alion.io/mcp/rest/get_company?id=2146362"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ficounter-senior-collections-data-engineer-us-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ficounter-senior-collections-data-engineer-us-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ficounter-senior-collections-data-engineer-us-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/icounter-senior-collections-data-engineer-us-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ficounter-senior-collections-data-engineer-us-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3532122}},{"tool":"search_jobs","arguments":{"company":"icounter.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3532122},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}