Teams at Coalition

Lead threat intelligence activities focused on identifying emerging vulnerabilities and exploitation, driving zero-day alerts, creating detection rules and technology fingerprints, maintaining honeypot networks, analyzing security telemetry, reducing false positives, and publishing actionable advisories. The role collaborates with security, underwriting, incident response, product, and data engineering teams, participates in emergency on-call coverage, and translates vulnerability research into enterprise risk signals.

Build and operate AWS infrastructure, automation, observability, CI/CD pipelines, and internal developer platform components. Improve system reliability through resilience testing, automated recovery, capacity planning, and SLOs. Own projects from planning through rollout, mentor engineers, establish infrastructure standards, collaborate with software and security teams, and participate in a low-volume on-call rotation.

Design, build, and operate large-scale distributed scanning services in Python and Go. Own systems design, implementation, deployment, scalability, reliability, observability, and production support for internet-wide and customer-specific security scans. Collaborate with security, product, data, and infrastructure teams to deliver scanning and threat-intelligence capabilities, improve architecture and performance, and mentor engineers.