Threat Intelligence Engineer

Take-Two Interactive Software, Inc. • Las Vegas, NV

1d

About The Position

Take-Two Interactive Software is seeking a Threat Intelligence Engineer to help operationalize cyber threat intelligence and engineer solutions to counter emerging security threats. The role works with security and technology teams to integrate threat data into security infrastructure and protect Take-Two and its labels’ systems, networks, and data. The engineer is part of Take-Two’s Information Security teams and reports to the Director of Threat Intelligence.

The position supports daily cyber threat intelligence operations, analyzes threats and adversary tactics, and works with the Global Security Operations Center, Detection Engineering, and Incident Response teams to incorporate intelligence into security tools. It also involves automating integrations and workflows, supporting threat intelligence platforms and related tools, and producing actionable alerts, briefs, and tactical reports for technical teams.

Requirements

• 2–4 years of experience in cybersecurity, including at least 1–2 years focused on threat intelligence, security engineering, or security operations (SOC).
• Solid understanding of network fundamentals, operating system internals, common attack vectors, and the general cyber threat landscape.
• Experience with APIs, data formats such as JSON, XML, and STIX/TAXII, and systems integration to streamline security workflows.
• Ability to analyze data from sources such as open-source intelligence, technical reports, and internal logs to draw technical conclusions and identify malicious activity.
• Familiarity with threat intelligence and security frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Strong written and verbal communication skills, including documenting engineering processes and clearly communicating threat findings.
• Hands-on experience with SIEM systems, threat intelligence platforms (TIPs), or EDR solutions.

Nice To Haves

• Proficiency in scripting languages such as Python, PowerShell, or Bash for automating data collection, API interactions, and analysis tasks.
• Relevant industry certifications such as CompTIA Security+/CySA+, GIAC (GSEC, GCTI), or similar intermediate credentials.
• Familiarity with securing and monitoring cloud environments such as AWS, Azure, or GCP.
• Basic understanding of malware analysis or reverse engineering concepts.

Responsibilities

• Manage threat feeds, parse indicators of compromise (IOCs), and ensure data quality across cyber threat intelligence platforms.
• Analyze emerging threats and adversary tactics, techniques, and procedures to help engineer detection and prevention mechanisms.
• Collaborate with the Global Security Operations Center, Detection Engineering, and Incident Response teams to ingest and operationalize threat intelligence in SIEM, EDR, and firewall systems.
• Build and maintain API integrations, scripts, and playbooks to automate indicator ingestion, correlation, and dissemination across security platforms.
• Assist with deployment, configuration, maintenance, and tuning of Threat Intelligence Platforms and related security engineering tools.
• Assist in producing timely intelligence alerts, briefs, and tactical reports for technical teams.

Benefits

• Medical benefits, including HSA and FSA.
• Dental insurance.
• Vision insurance.
• 401(k) with company match.
• Employee stock purchase plan.
• Commuter benefits.
• In-house wellness program.
• Learning and development opportunities.
• Charitable giving platform with company match.
• Fitness allowance.
• Employee discount programs.
• Free games and events.
• Stocked pantries.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed