{"id":4101530,"url":"https://alion.io/job/take-two-interactive-threat-intelligence-engineer-3","title":"Threat Intelligence Engineer","company":{"id":58840,"name":"Take-Two Interactive","domain":"take2games.com","url":"https://alion.io/company/take-two-interactive","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0.333,"time_to_fill_p50_days":56,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Las Vegas, United States","Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"SIEM","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Telegram","optional":true},{"name":"WhatsApp","optional":true}],"status":"live","first_seen_at":"2026-11-11T17:54:23Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T21:50:48Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"WHO WE ARE \nHeadquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our products are designed for console gaming systems, PC, and mobile, including smartphones and tablets. We deliver our products through physical retail, digital download, online platforms, and cloud streaming services. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.\nWhile our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun and believe that we provide a great place to come to work each day to pursue your passions.\nTHE CHALLENGE\nWe are looking for a Threat Intelligence Engineer. In this role, you will be on the front lines of our defense, helping to operationalize intelligence and build engineering solutions to counter emerging security threats. You'll work closely with various security and technology teams to integrate threat data into our security infrastructure, strengthening our defenses and protecting our organization. Your hands-on expertise will directly contribute to safeguarding Take-Two and its labels' systems, networks, and data. You will work with Take-Two's Information Security teams, reporting to the Director of Threat Intelligence.\nWHAT YOU’LL TAKE ON\n Threat Intelligence Operations: Support the day-to-day operations of the cyber threat intelligence (CTI) program by managing threat feeds, parsing indicators of compromise (IOCs), and ensuring data quality across our platforms.\n Threat Analysis & Engineering: Analyze emerging threats and adversary tactics, techniques, and procedures (TTPs) to help engineer robust detection and prevention mechanisms.\n Enhance Our Security Posture: Collaborate with our Global Security Operations Center (GSOC), Detection Engineering, and Incident Response teams to ingest and operationalize threat intelligence into our SIEM, EDR, and firewalls.\nAutomation & Integration: Build and maintain API integrations, scripts, and playbooks to automate indicator ingestion, correlation, and dissemination across security platforms.\n Security Infrastructure Support: Assist in the deployment, configuration, maintenance, and tuning of our Threat Intelligence Platforms (TIP) and related security engineering tools.\nProduce Actionable Reporting: Assist in generating timely intelligence alerts, briefs, and tactical reports for technical teams to provide context around active threats.\nWHAT YOU BRING\n Experience: 2-4 years of experience in cybersecurity, with at least 1-2 years focused on threat intelligence, security engineering, or security operations (SOC).\nTechnical Expertise: A solid understanding of network fundamentals, operating system internals, common attack vectors, and the general cyber threat landscape.\n Engineering Mindset: Experience working with APIs, data formats (JSON, XML, STIX/TAXII), and systems integration to streamline security workflows.\n Analytical Skills: The ability to analyze data from various sources (e.g., open-source intelligence, technical reports, internal logs) to draw technical conclusions and identify malicious activity.\nIntelligence Framework Knowledge: Familiarity with common threat intelligence and security frameworks like MITRE ATT&CK and the Cyber Kill Chain.\nCommunication Skills: Strong written and verbal communication skills, with the ability to document engineering processes and communicate threat findings clearly.\n Tool Proficiency: Hands-on experience with security information and event management (SIEM) systems, threat intelligence platforms (TIPs), or EDR solutions.\nGreat to Have\n Scripting Skills: Proficiency in scripting languages (e.g., Python, PowerShell, or Bash) to automate data collection, API interactions, and analysis tasks.\n Certifications: Relevant industry certifications such as CompTIA Security+/CySA+, GIAC (GSEC, GCTI), or similar intermediate credentials.\n Cloud Experience: Familiarity with securing and monitoring cloud environments (AWS, Azure, or GCP).\nMalware Familiarity: Basic understanding of malware analysis or reverse engineering concepts.\n\nWHAT WE OFFER YOU\nGreat Company Culture. Ranked as one of the most creative and innovative places to work, creativity, innovation, efficiency, diversity and philanthropy are among the core tenets of our organization and are integral drivers of our continued success.\nGrowth: As a global entertainment company, we pride ourselves on creating environments where employees are encouraged to be themselves, inquisitive, collaborative and to grow within and around the company.\nWork Hard, Play Hard. Our employees bond, blow-off steam, and flex some creative muscles - through corporate boot camp classes, company parties, game release events, monthly socials, and team challenges.\n Benefits. Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match and more!\n Perks. Fitness allowance, employee discount programs, free games & events and stocked pantries.\nTake-Two Interactive Software, Inc. (“T2”) is proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organization. Employment at T2 is based on substantive ability, objective qualifications, and work ethic - not an individual’s race, creed, color, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offenses, reproductive health decision, or any other characteristics protected by applicable law.\nPlease be aware that Take-Two does not conduct job interviews or make job offers over third-party messaging apps such as Telegram, WhatsApp, or others. Take-Two also does not engage in any financial exchanges during the recruitment or onboarding process, and the Company will never ask a candidate for their personal or financial information over an app or other unofficial chat channel. Any attempt to do so may be the result of a scam or phishing exercise. Take-Two’s in-house recruitment team will only contact individuals through their official Company email addresses (i.e., via a take2games.com email domain). If you need to report an issue or otherwise have questions, please contact ","description_format":"text","description_chars":7093,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Mobile Games","PC Games"],"lifecycle":[{"event":"open","at":"2026-11-11T21:50:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7 · green card filings: 4","filings_12m":7,"filings_prev_12m":8,"green_card_filings_12m":4,"median_offered_wage_usd":112955,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":56,"reasons":["conf:1","win:early","comp:junior"],"computed_at":"2026-11-11T23:23:55Z"},"pay":null,"html_url":"https://alion.io/job/take-two-interactive-threat-intelligence-engineer-3","json_url":"https://alion.io/job/take-two-interactive-threat-intelligence-engineer-3.json","meta":{"generated_at":"2026-11-11T23:23:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":46538,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58840},"rest":"https://alion.io/mcp/rest/get_company?id=58840"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftake-two-interactive-threat-intelligence-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftake-two-interactive-threat-intelligence-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftake-two-interactive-threat-intelligence-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/take-two-interactive-threat-intelligence-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftake-two-interactive-threat-intelligence-engineer-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4101530}},{"tool":"search_jobs","arguments":{"company":"take2games.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4101530},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}