Team Cymru

Research threat actors, malware, and campaigns, write customer-facing intelligence reports, and partner with engineering teams on analytical tools and detection automation. | Requires at least five years in threat intelligence or network forensics, strong network infrastructure analysis and research skills, excellent communication, and preferably a relevant bachelor's degree. | Join the mission to make the digital world safer. About Team Cymru Team Cymru is the leader in Internet Threat Intelligence. Our unique and global insight empowers an amazing team of analysts to develop industry leading intelligence that is critical to the success of our customer's cyber security efforts. Team Cymru is an ardent supporter of the Threat Intelligence community. We enable industry collaboration by hosting exclusive conferences each year. Our team members actively participate in working groups, attend industry events, and work directly with fellow community peers. Job Description Team Cymru analysts make a difference every day, leading in the battle against those intent on harming others. We are passionate about our mission, and we are looking for an additional teammate who shares in that passion. Do you have a strong background in analytic tradecraft, deductive reasoning, and critical thinking? Would you like to have access to our industry leading threat intelligence data? Are you a proven teammate, mentor, and technical leader? Would you like to join the battle and make a difference in the world? If so, opportunity knocks. Team Cymru analysts work on research and reporting pertaining to our customers' security and intelligence requirements, empowering them to complete their mission effectively and efficiently. Additionally, our analysts undertake research into other threats and work closely with our engineering teams in the development of our world class analytical tools, data analytics systems, and analysis automation, as well as adding to the body of knowledge of those threats. As a Senior Threat Intelligence Analyst, you will provide that vital bridge between technical and strategic intelligence research, writing for both practitioner and senior leadership audiences to understand the impact of the threat, while explaining the technical details and rationale behind those assessments, the best of both worlds! Responsibilities: Threat Research ● Conduct extensive, proactive research into threat actors, malware families, campaigns, and evolving TTPs to maintain relevance and deepen Team Cymru's body of knowledge ● Investigate and present operational and strategic intelligence on threat actors, including attribution, motivation, capability assessment, and geopolitical context ● Lead short- and long-term threat tracking projects, identifying intelligence gaps and proposing targeted research to address collection shortfalls ● Evaluate tools, methodologies, and best practices for understanding adversary TTPs, and proactively share knowledge and techniques with peers Network and Infrastructure Analysis ● Perform deep network traffic and infrastructure analysis to support both customer requests and independent research, using Team Cymru's unique global dataset ● Analyze PCAP, NetFlow, passive DNS (PDNS), open ports, certificates, and other datasets to map malicious infrastructure and identify related threat actor assets ● Identify and refine indicators of compromise (IOCs) and threat actor TTPs, translating these into automated tracking mechanisms where possible to enable ongoing monitoring of threats and adversary groups Reporting ● Receive, triage, and respond to customer requests with timely, written technical threat intelligence reports tailored to the customer's specific threat landscape and intelligence requirements ● Ensure all finished intelligence products meet Team Cymru's analytic standards: clear structure, appropriate use of estimative language and confidence levels, and actionable conclusions ● Conduct peer review of colleagues' reporting to maintain consistency, accuracy, objectivity, and analytic rigor across all published products Collaboration ● Work closely with colleagues in the development of analytical tools, data analytics systems, research methodologies, and analysis automation capabilities ● Support our threat detection and data acquisition teams to align signature development and telemetry collection with overarching threat intelligence priorities ● Participate in working groups, industry events, and community collaboration as a representative of Team Cymru's intelligence capability Qualifications & Experience ● 5+ years of experience as a threat intelligence analyst, network forensics analyst, or IT security analyst ● Preferably, a Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent ● Exceptional oral and written communication skills, with the ability to produce customer-facing intelligence reports under time pressure. Experience using structured analysis techniques, estimative language, and confidence levels is preferred ● Proven track record of leading complex analytical projects or investigations, including the ability to manage multiple concurrent work streams Additional Skills ● Well-developed analytical, deductive reasoning, and critical thinking skills; comfortable forming assessments from incomplete or ambiguous data ● Proven ability to work effectively within a distributed, remote team environment, including willingness to conduct peer review and share tradecraft knowledge ● Experience tracking APT, nation-state, or cybercriminal actors, with the ability to contextualize their activity within the broader geopolitical or strategic landscape ● Outstanding network infrastructure and traffic analysis skills: PCAP, NetFlow, PDNS, open ports, certificates ● Deep working knowledge of IP networking and internet services: DNS, HTTP/HTTPS, TLS, VPNs, and routing protocols (BGP) ● Demonstrated knowledge of operating system concepts, including experience developing and contextualizing indicators of compromise and understanding their deployment in host and network-level detection architectures ● Working proficiency in SQL and querying and analyzing large disparate datasets ● Strong familiarity with common OSINT platforms and research techniques Highly Desirable Skills ● Subject Matter Expert (SME) for a specific regional or threat actor group, with demonstrable depth in their TTPs, infrastructure patterns, and campaign history ● Programming or scripting proficiency, preferably Python, for data processing, automation, or tool development ● Confident and skilled public speaker with experience presenting technical research to large audiences at industry conferences or similar forums ● Familiarity with using AI systems to rapidly prototype analytical tools and develop proof-of-concept projects ● Hands-on experience managing remote Linux servers and engineering custom Proof-of-Concept tools to extract, simulate, or generate unique threat data ● Working understanding of malware analysis and network analysis: YARA, Zeek, Suricata, Sandbox reporting ● Exposure to malware reverse engineering, including static and dynamic analysis techniques and common tooling (e.g. Ghidra, IDA Pro, x64dbg) ● Familiarity with the operational structures of hosting providers, ISPs, and internet exchanges, including how infrastructure is provisioned, attributed, and abused by threat actors Travel Occasional travel within the UK and internationally for customer workshops, industry events, and team meetings is required Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position.

Design, build, and operate scalable software systems for threat intelligence data and mentor engineers. | 7+ years experience, strong Go proficiency, distributed systems design, and operational ownership in production environments. | Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. We're looking for a Senior Software Engineer to design, build, and scale the software that powers our threat intelligence capabilities, from data collection and enrichment pipelines to the platforms and tools analysts and customers rely on. You'll operate with significant technical ownership, working closely with stakeholders to turn deep domain knowledge into reliable, production-grade systems. This role suits an engineer who can move fluidly between hands-on coding, system design, and mentoring, and who is energized by the mission-driven, high-signal nature of threat intelligence work. Key Responsibilities: System Design & Development • Design, build, and operate large-scale, high-throughput systems for collecting, processing, and enriching threat intelligence data (network telemetry, indicators of compromise, malware artifacts, or similar) • Own significant components or services end-to-end, from technical design through deployment, monitoring, and iteration in production • Write clean, well-tested, maintainable code in Go, and contribute to our engineering standards and practices • Participate in architectural decisions, design reviews, and technical planning; provide informed input on trade-offs around scale, latency, and data integrity Collaboration & Domain Translation • Partner directly with threat intelligence analysts and researchers to translate investigative workflows and detection logic into scalable software • Collaborate cross-functionally with product, security, and data teams to prioritize work that has direct impact on customer and analyst outcomes Reliability & Operations • Improve the reliability, performance, and observability of existing systems, including on-call participation for services you own Mentorship & Engineering Quality • Mentor other engineers through code review, pairing, and technical guidance; help raise the bar for engineering quality across the team Qualifications & Experience • 7+ years of professional software engineering experience, including significant time building and operating production systems at scale • Strong proficiency in Go and comfort working across the stack, from data pipelines to APIs, services, and databases • Demonstrated experience designing distributed systems, you can reason clearly about trade-offs in scalability, reliability, latency, and cost • Experience working with large or high-velocity datasets; familiarity with streaming or batch data pipeline technologies is a strong plus • Solid understanding of software engineering fundamentals: testing, CI/CD, version control, code review practices, and operational ownership (on-call, incident response) • Experience building and maintaining ClickHouse and PostgreSQL databases • Experience building and scaling large data platforms using the Medallion Architecture Additional Skills • Genuine interest in cybersecurity or threat intelligence; prior experience in the domain is a plus but not required for a strong engineer with the right curiosity and aptitude • Excellent written and verbal communication skills, including the ability to explain technical trade-offs to non-engineering stakeholders • A collaborative, low-ego approach to technical disagreement, mentorship, and cross-team problem-solving • Experience with the specific data domains relevant to threat intelligence (network flow data, DNS, malware analysis, OSINT, or similar) • Experience with AWS and infrastructure-as-code tooling • Familiarity with security frameworks or standards relevant to the industry (MITRE ATT&CK, STIX/TAXII) • Prior experience in a startup or fast-scaling engineering organization, including comfort with ambiguity and shifting priorities • Open-source contributions or a public track record of technical writing/speaking Education and Certifications • Bachelor's degree or equivalent experience in Computer Science, Software Engineering, or related field (or equivalent practical experience) Travel Occasional travel for team meetings or industry events may be required. Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1 Powered by JazzHR Remote Skills: Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Services, Code Reviews, Communication Skills, Computer Networks, Computer Science, Computer Security, Computer Skills, Continuous Deployment/Delivery, Continuous Integration, Cross-Functional, Customer Support/Service, DNS (Domain Name System), Data Collection, Data Management, Data Quality, Data Sets, Distributed Computing, Engineering, Enterprise Protection, Establish Priorities, High Throughput, Incident Response, Industry/Trade Analysis, Intelligence Agencies, Internet Security, Machine Tool, Malware, Malware Analysis, Mentoring, OSINT (Open Source Intelligence), On Call, Open Source, Operational Audit, PostgreSQL, Presentation/Verbal Skills, Problem Solving Skills, Production Systems, Reliability Engineering, Security Attacks, Software Design, Software Engineering, Source Code/Configuration Management (SCM), Startup, Team Player, Technical Leadership, Technical Writing, Technical/Engineering Design, Telemetry, Testing, Website Traffic, Writing Skills Team Cymru

Design, build, and operate large-scale threat intelligence software systems with technical ownership and mentoring. | 7+ years software engineering experience with distributed systems, proficiency in Go, and strong collaboration skills. | Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. We're looking for a Senior Software Engineer to design, build, and scale the software that powers our threat intelligence capabilities, from data collection and enrichment pipelines to the platforms and tools analysts and customers rely on. You'll operate with significant technical ownership, working closely with stakeholders to turn deep domain knowledge into reliable, production-grade systems. This role suits an engineer who can move fluidly between hands-on coding, system design, and mentoring, and who is energized by the mission-driven, high-signal nature of threat intelligence work. Key Responsibilities: System Design & Development • Design, build, and operate large-scale, high-throughput systems for collecting, processing, and enriching threat intelligence data (network telemetry, indicators of compromise, malware artifacts, or similar) • Own significant components or services end-to-end, from technical design through deployment, monitoring, and iteration in production • Write clean, well-tested, maintainable code in Go, and contribute to our engineering standards and practices • Participate in architectural decisions, design reviews, and technical planning; provide informed input on trade-offs around scale, latency, and data integrity Collaboration & Domain Translation • Partner directly with threat intelligence analysts and researchers to translate investigative workflows and detection logic into scalable software • Collaborate cross-functionally with product, security, and data teams to prioritize work that has direct impact on customer and analyst outcomes Reliability & Operations • Improve the reliability, performance, and observability of existing systems, including on-call participation for services you own Mentorship & Engineering Quality • Mentor other engineers through code review, pairing, and technical guidance; help raise the bar for engineering quality across the team Qualifications & Experience • 7+ years of professional software engineering experience, including significant time building and operating production systems at scale • Strong proficiency in Go and comfort working across the stack, from data pipelines to APIs, services, and databases • Demonstrated experience designing distributed systems, you can reason clearly about trade-offs in scalability, reliability, latency, and cost • Experience working with large or high-velocity datasets; familiarity with streaming or batch data pipeline technologies is a strong plus • Solid understanding of software engineering fundamentals: testing, CI/CD, version control, code review practices, and operational ownership (on-call, incident response) • Experience building and maintaining ClickHouse and PostgreSQL databases • Experience building and scaling large data platforms using the Medallion Architecture Additional Skills • Genuine interest in cybersecurity or threat intelligence; prior experience in the domain is a plus but not required for a strong engineer with the right curiosity and aptitude • Excellent written and verbal communication skills, including the ability to explain technical trade-offs to non-engineering stakeholders • A collaborative, low-ego approach to technical disagreement, mentorship, and cross-team problem-solving • Experience with the specific data domains relevant to threat intelligence (network flow data, DNS, malware analysis, OSINT, or similar) • Experience with AWS and infrastructure-as-code tooling • Familiarity with security frameworks or standards relevant to the industry (MITRE ATT&CK, STIX/TAXII) • Prior experience in a startup or fast-scaling engineering organization, including comfort with ambiguity and shifting priorities • Open-source contributions or a public track record of technical writing/speaking Education and Certifications • Bachelor's degree or equivalent experience in Computer Science, Software Engineering, or related field (or equivalent practical experience) Travel Occasional travel for team meetings or industry events may be required. Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1 Powered by JazzHR Remote Skills: Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Services, Code Reviews, Communication Skills, Computer Networks, Computer Science, Computer Security, Computer Skills, Continuous Deployment/Delivery, Continuous Integration, Cross-Functional, Customer Support/Service, DNS (Domain Name System), Data Collection, Data Management, Data Quality, Data Sets, Distributed Computing, Engineering, Enterprise Protection, Establish Priorities, High Throughput, Incident Response, Industry/Trade Analysis, Intelligence Agencies, Internet Security, Machine Tool, Malware, Malware Analysis, Mentoring, OSINT (Open Source Intelligence), On Call, Open Source, Operational Audit, PostgreSQL, Presentation/Verbal Skills, Problem Solving Skills, Production Systems, Reliability Engineering, Security Attacks, Software Design, Software Engineering, Source Code/Configuration Management (SCM), Startup, Team Player, Technical Leadership, Technical Writing, Technical/Engineering Design, Telemetry, Testing, Website Traffic, Writing Skills Team Cymru

Design, build, and operate large-scale threat intelligence systems with technical ownership and collaboration. | 7+ years software engineering experience with proficiency in Go, distributed systems, data pipelines, and operational ownership. | Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. We're looking for a Senior Software Engineer to design, build, and scale the software that powers our threat intelligence capabilities, from data collection and enrichment pipelines to the platforms and tools analysts and customers rely on. You'll operate with significant technical ownership, working closely with stakeholders to turn deep domain knowledge into reliable, production-grade systems. This role suits an engineer who can move fluidly between hands-on coding, system design, and mentoring, and who is energized by the mission-driven, high-signal nature of threat intelligence work. Key Responsibilities: System Design & Development • Design, build, and operate large-scale, high-throughput systems for collecting, processing, and enriching threat intelligence data (network telemetry, indicators of compromise, malware artifacts, or similar) • Own significant components or services end-to-end, from technical design through deployment, monitoring, and iteration in production • Write clean, well-tested, maintainable code in Go, and contribute to our engineering standards and practices • Participate in architectural decisions, design reviews, and technical planning; provide informed input on trade-offs around scale, latency, and data integrity Collaboration & Domain Translation • Partner directly with threat intelligence analysts and researchers to translate investigative workflows and detection logic into scalable software • Collaborate cross-functionally with product, security, and data teams to prioritize work that has direct impact on customer and analyst outcomes Reliability & Operations • Improve the reliability, performance, and observability of existing systems, including on-call participation for services you own Mentorship & Engineering Quality • Mentor other engineers through code review, pairing, and technical guidance; help raise the bar for engineering quality across the team Qualifications & Experience • 7+ years of professional software engineering experience, including significant time building and operating production systems at scale • Strong proficiency in Go and comfort working across the stack, from data pipelines to APIs, services, and databases • Demonstrated experience designing distributed systems, you can reason clearly about trade-offs in scalability, reliability, latency, and cost • Experience working with large or high-velocity datasets; familiarity with streaming or batch data pipeline technologies is a strong plus • Solid understanding of software engineering fundamentals: testing, CI/CD, version control, code review practices, and operational ownership (on-call, incident response) • Experience building and maintaining ClickHouse and PostgreSQL databases • Experience building and scaling large data platforms using the Medallion Architecture Additional Skills • Genuine interest in cybersecurity or threat intelligence; prior experience in the domain is a plus but not required for a strong engineer with the right curiosity and aptitude • Excellent written and verbal communication skills, including the ability to explain technical trade-offs to non-engineering stakeholders • A collaborative, low-ego approach to technical disagreement, mentorship, and cross-team problem-solving • Experience with the specific data domains relevant to threat intelligence (network flow data, DNS, malware analysis, OSINT, or similar) • Experience with AWS and infrastructure-as-code tooling • Familiarity with security frameworks or standards relevant to the industry (MITRE ATT&CK, STIX/TAXII) • Prior experience in a startup or fast-scaling engineering organization, including comfort with ambiguity and shifting priorities • Open-source contributions or a public track record of technical writing/speaking Education and Certifications • Bachelor's degree or equivalent experience in Computer Science, Software Engineering, or related field (or equivalent practical experience) Travel Occasional travel for team meetings or industry events may be required. Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1 Powered by JazzHR Remote Skills: Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Services, Code Reviews, Communication Skills, Computer Networks, Computer Science, Computer Security, Computer Skills, Continuous Deployment/Delivery, Continuous Integration, Cross-Functional, Customer Support/Service, DNS (Domain Name System), Data Collection, Data Management, Data Quality, Data Sets, Distributed Computing, Engineering, Enterprise Protection, Establish Priorities, High Throughput, Incident Response, Industry/Trade Analysis, Intelligence Agencies, Internet Security, Machine Tool, Malware, Malware Analysis, Mentoring, OSINT (Open Source Intelligence), On Call, Open Source, Operational Audit, PostgreSQL, Presentation/Verbal Skills, Problem Solving Skills, Production Systems, Reliability Engineering, Security Attacks, Software Design, Software Engineering, Source Code/Configuration Management (SCM), Startup, Team Player, Technical Leadership, Technical Writing, Technical/Engineering Design, Telemetry, Testing, Website Traffic, Writing Skills Team Cymru

Design, build, and operate large-scale threat intelligence software systems with technical ownership and cross-team collaboration. | 7+ years software engineering experience with distributed systems, proficiency in Go, and strong collaboration and mentoring skills. | Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. We're looking for a Senior Software Engineer to design, build, and scale the software that powers our threat intelligence capabilities, from data collection and enrichment pipelines to the platforms and tools analysts and customers rely on. You'll operate with significant technical ownership, working closely with stakeholders to turn deep domain knowledge into reliable, production-grade systems. This role suits an engineer who can move fluidly between hands-on coding, system design, and mentoring, and who is energized by the mission-driven, high-signal nature of threat intelligence work. Key Responsibilities: System Design & Development • Design, build, and operate large-scale, high-throughput systems for collecting, processing, and enriching threat intelligence data (network telemetry, indicators of compromise, malware artifacts, or similar) • Own significant components or services end-to-end, from technical design through deployment, monitoring, and iteration in production • Write clean, well-tested, maintainable code in Go, and contribute to our engineering standards and practices • Participate in architectural decisions, design reviews, and technical planning; provide informed input on trade-offs around scale, latency, and data integrity Collaboration & Domain Translation • Partner directly with threat intelligence analysts and researchers to translate investigative workflows and detection logic into scalable software • Collaborate cross-functionally with product, security, and data teams to prioritize work that has direct impact on customer and analyst outcomes Reliability & Operations • Improve the reliability, performance, and observability of existing systems, including on-call participation for services you own Mentorship & Engineering Quality • Mentor other engineers through code review, pairing, and technical guidance; help raise the bar for engineering quality across the team Qualifications & Experience • 7+ years of professional software engineering experience, including significant time building and operating production systems at scale • Strong proficiency in Go and comfort working across the stack, from data pipelines to APIs, services, and databases • Demonstrated experience designing distributed systems, you can reason clearly about trade-offs in scalability, reliability, latency, and cost • Experience working with large or high-velocity datasets; familiarity with streaming or batch data pipeline technologies is a strong plus • Solid understanding of software engineering fundamentals: testing, CI/CD, version control, code review practices, and operational ownership (on-call, incident response) • Experience building and maintaining ClickHouse and PostgreSQL databases • Experience building and scaling large data platforms using the Medallion Architecture Additional Skills • Genuine interest in cybersecurity or threat intelligence; prior experience in the domain is a plus but not required for a strong engineer with the right curiosity and aptitude • Excellent written and verbal communication skills, including the ability to explain technical trade-offs to non-engineering stakeholders • A collaborative, low-ego approach to technical disagreement, mentorship, and cross-team problem-solving • Experience with the specific data domains relevant to threat intelligence (network flow data, DNS, malware analysis, OSINT, or similar) • Experience with AWS and infrastructure-as-code tooling • Familiarity with security frameworks or standards relevant to the industry (MITRE ATT&CK, STIX/TAXII) • Prior experience in a startup or fast-scaling engineering organization, including comfort with ambiguity and shifting priorities • Open-source contributions or a public track record of technical writing/speaking Education and Certifications • Bachelor's degree or equivalent experience in Computer Science, Software Engineering, or related field (or equivalent practical experience) Travel Occasional travel for team meetings or industry events may be required. Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1 Powered by JazzHR Remote Skills: Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Services, Code Reviews, Communication Skills, Computer Networks, Computer Science, Computer Security, Computer Skills, Continuous Deployment/Delivery, Continuous Integration, Cross-Functional, Customer Support/Service, DNS (Domain Name System), Data Collection, Data Management, Data Quality, Data Sets, Distributed Computing, Engineering, Enterprise Protection, Establish Priorities, High Throughput, Incident Response, Industry/Trade Analysis, Intelligence Agencies, Internet Security, Machine Tool, Malware, Malware Analysis, Mentoring, OSINT (Open Source Intelligence), On Call, Open Source, Operational Audit, PostgreSQL, Presentation/Verbal Skills, Problem Solving Skills, Production Systems, Reliability Engineering, Security Attacks, Software Design, Software Engineering, Source Code/Configuration Management (SCM), Startup, Team Player, Technical Leadership, Technical Writing, Technical/Engineering Design, Telemetry, Testing, Website Traffic, Writing Skills Team Cymru

Design, build, and operate large-scale threat intelligence software systems with technical ownership and collaboration. | 7+ years software engineering experience, proficiency in Go, distributed systems design, and operational ownership. | Join the mission to make the digital world safer. About Team Cymru Team Cymru's mission is to save and improve human lives by helping public and private sector analysts track and take down cybercriminals, visibility into global cyber threat activity and are a key intelligence source for leading cybersecurity and threat intelligence vendors. Our Pure Signal™ platform gives enterprise security teams on-demand access to global internet traffic telemetry, providing clarity into what's happening across the internet with a level of visibility comparable to their own internal networks. This allows organizations to close detection gaps, accelerate incident response, and get ahead of critical, recurring threats. Team Cymru is a fast-paced, distribution-focused, private equity–backed company where your work directly supports a mission that protects millions worldwide. We're looking for a Senior Software Engineer to design, build, and scale the software that powers our threat intelligence capabilities, from data collection and enrichment pipelines to the platforms and tools analysts and customers rely on. You'll operate with significant technical ownership, working closely with stakeholders to turn deep domain knowledge into reliable, production-grade systems. This role suits an engineer who can move fluidly between hands-on coding, system design, and mentoring, and who is energized by the mission-driven, high-signal nature of threat intelligence work. Key Responsibilities: System Design & Development • Design, build, and operate large-scale, high-throughput systems for collecting, processing, and enriching threat intelligence data (network telemetry, indicators of compromise, malware artifacts, or similar) • Own significant components or services end-to-end, from technical design through deployment, monitoring, and iteration in production • Write clean, well-tested, maintainable code in Go, and contribute to our engineering standards and practices • Participate in architectural decisions, design reviews, and technical planning; provide informed input on trade-offs around scale, latency, and data integrity Collaboration & Domain Translation • Partner directly with threat intelligence analysts and researchers to translate investigative workflows and detection logic into scalable software • Collaborate cross-functionally with product, security, and data teams to prioritize work that has direct impact on customer and analyst outcomes Reliability & Operations • Improve the reliability, performance, and observability of existing systems, including on-call participation for services you own Mentorship & Engineering Quality • Mentor other engineers through code review, pairing, and technical guidance; help raise the bar for engineering quality across the team Qualifications & Experience • 7+ years of professional software engineering experience, including significant time building and operating production systems at scale • Strong proficiency in Go and comfort working across the stack, from data pipelines to APIs, services, and databases • Demonstrated experience designing distributed systems, you can reason clearly about trade-offs in scalability, reliability, latency, and cost • Experience working with large or high-velocity datasets; familiarity with streaming or batch data pipeline technologies is a strong plus • Solid understanding of software engineering fundamentals: testing, CI/CD, version control, code review practices, and operational ownership (on-call, incident response) • Experience building and maintaining ClickHouse and PostgreSQL databases • Experience building and scaling large data platforms using the Medallion Architecture Additional Skills • Genuine interest in cybersecurity or threat intelligence; prior experience in the domain is a plus but not required for a strong engineer with the right curiosity and aptitude • Excellent written and verbal communication skills, including the ability to explain technical trade-offs to non-engineering stakeholders • A collaborative, low-ego approach to technical disagreement, mentorship, and cross-team problem-solving • Experience with the specific data domains relevant to threat intelligence (network flow data, DNS, malware analysis, OSINT, or similar) • Experience with AWS and infrastructure-as-code tooling • Familiarity with security frameworks or standards relevant to the industry (MITRE ATT&CK, STIX/TAXII) • Prior experience in a startup or fast-scaling engineering organization, including comfort with ambiguity and shifting priorities • Open-source contributions or a public track record of technical writing/speaking Education and Certifications • Bachelor's degree or equivalent experience in Computer Science, Software Engineering, or related field (or equivalent practical experience) Travel Occasional travel for team meetings or industry events may be required. Why Join Team Cymru? At Team Cymru, we provide unmatched global threat intelligence that empowers organizations to proactively disrupt adversaries. You'll be at the forefront of cybersecurity innovation, helping customers harness the full power of our threat intelligence to achieve critical business and security outcomes. We offer a collaborative, mission-driven culture where your expertise and impact will directly contribute to improving global security. Ready to make an impact? Apply now and help shape the financial future of a company protecting millions worldwide. This job description is not exhaustive. Responsibilities may evolve as needed. Team Cymru is an equal opportunity employer and welcomes applicants from all backgrounds. This is a remote position. #LI-BR1