Senior Threat Intelligence Engineer

Coalition, Inc. | Cyber insurance

1h 38m ago

Worldwide Remote

Full Time

Title: Senior Threat Intelligence Engineer Location: Any location, Portugal

About us

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks.

Opportunities to make an impact with bold thinking are real—and happening daily at Coalition.

About the role

Join Coalition’s Threat Intelligence team to identify emerging vulnerabilities and exploitation activity before they cause loss for policyholders. You’ll lead key parts of the Zero-Day Alert process and build the detections, honeypots, and original intelligence behind Coalition’s Active Insurance platform, working across Security, Underwriting, Incident Response, Product, and Data Engineering.

Responsibilities

Drive the Zero-Day Alert process from vulnerability triage to actionable policyholder notification
Coordinate urgent outreach with the Security Support Center, Underwriting, and Incident Response for high-severity or actively exploited vulnerabilities
Write and refine technology fingerprints, detection rules, and security findings that turn scan data into reliable risk signals
Maintain and expand the distributed honeypot network, analyzing telemetry for exploitation and new adversary techniques
Improve detection accuracy and reduce false positives using claims insights, external datasets, and vulnerability research
Publish advisories, research, and briefings that inform security decisions
Participate in the on-call rotation for emergency notifications

Skills and Qualifications

5+ years in threat intelligence, vulnerability research, pen testing, or defensive security engineering
Deep knowledge of network protocols, operating systems, web apps, and exploitation (RCE, auth bypass, edge-device vulnerabilities)
Experience assessing new vulnerabilities under time pressure and translating them into practical enterprise risk
Hands-on experience writing scanner detections, signatures, or parsing scripts (Python, regex, protocol fingerprints)
Experience with honeypots, deception tech, or internet-wide scanning and other large security datasets
Strong Python and SQL skills
Excellent communication with both technical and non-technical audiences
A track record of clear documentation or public security writing, plus the judgment to lead complex work independently

Bonus Points

Experience with Censys, Shodan, BinaryEdge, or attack surface mapping
Reverse engineering, patch diffing, or PoC exploit verification
Familiarity with VPNs, firewalls, load balancers, or SCADA/ICS
Public research, CVE credits, or conference talks
Knowledge of cyber insurance, underwriting, or risk aggregation modeling

Perks

100% medical, dental and vision coverage
Flexible PTO policy
Annual home office stipend and WeWork access
Mental & physical health wellness programs (One Medical, Headspace, Wellhub, and more)!
Competitive compensation and opportunity for advancement

Why Coalition?

Work at Coalition is centered on the joint mission to Protect the Unprotected. We have built a remote-first, highly inclusive culture that welcomes people from diverse backgrounds. We trust each other to take responsibility, share ownership of outcomes, and put in the work together to protect businesses from digital risk. Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes while remaining true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion.

We’re always looking for collaborative, inquisitive individuals to join #OurCoalition.

Visit our Newsroom >

Privacy Notice

Coalition is committed to protecting your privacy and handling your personal information responsibly. We collect, use, and store personal information as necessary for the recruitment process and in compliance with applicable privacy laws and regulations in all regions where we operate. We want you to understand what personal information we collect, how we use it, and your rights regarding access, correction, and deletion of your data where applicable. Information submitted, collected, and processed as part of your application is subject to Coalition's Privacy Policy. For further details, please review our full Privacy Policy or contact us with any questions regarding how your information is handled.

Our Privacy Policy >

Safe Hiring Notice

Anti-Discrimination Notice

Coalition is proud to be an Equal Opportunity employer. Our policy is to provide equal employment opportunities to all individuals, without discrimination or harassment on the basis of any characteristic protected by applicable laws in each country where we operate. This commitment includes, but is not limited to, ensuring equal treatment in recruitment, selection, training, promotion, transfer, compensation, and all other aspects of employment. Coalition does not tolerate discrimination or harassment of any kind, and we are dedicated to fostering an inclusive and supportive workplace.

Accommodations

To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.

Required Skills

pythonsql

Required Languages

🇬🇧 English