Operationalize cyber threat intelligence by managing feeds, parsing indicators of compromise, analyzing adversary tactics, and integrating intelligence into SIEM, EDR, firewall, and security platforms. Build API integrations, scripts, and playbooks to automate ingestion and dissemination; support threat intelligence infrastructure; collaborate with security operations, detection engineering, and incident response teams; and produce actionable alerts, briefs, and reports.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.