Fluidstack
Security Engineer, Threat Intelligence
$220K–$280K
New York, NY +3 · On-site · Full-time · Posted Sep 9, 2026
- Location
- New York, NY
San Francisco, CA
Austin, TX
U.S. Remote
About the job
Tracks threats to frontier AI infrastructure and turns threat intelligence into operational detections, hunts, and incident-response support.
What you'll do
- Track nation-state and advanced criminal actors; analyze their tooling, infrastructure, and tradecraft.
- Build intelligence collection and enrichment pipelines and connect intelligence to detection and agentic triage systems.
- Lead intelligence-driven hunts and analyze malware and attacker tooling, translating findings into production detections and incident context.
What they ask for
- Experience tracking specific nation-state or advanced criminal actors as a core part of the job.
- Production-quality Python or similar, including building end-to-end automation and data pipelines.
- Hands-on malware, infrastructure, and log analysis.
- Production detection logic using YARA, Sigma, or SIEM-native queries, and collaboration with detection engineers and incident responders.
Nice to have
- Active threat-intelligence community network; experience with GPU or AI compute infrastructure, data centers, or multi-tenant cloud; LLM or agentic tooling for intelligence work.
- Public CTI research, conference talks, or open-source contributions.
Pay
$220,000 - $280,000 per year (base salary)
Tools
Python, YARA, Sigma, SIEM
AI focus
Applies threat intelligence to protect frontier AI infrastructure; connects intelligence to an agentic triage stack. Applying LLMs or agentic tooling to intelligence workflows is a preferred qualification.
Model-written summary · the original posting is authoritative