Threat Intelligence Engineer

Take-Two Interactive Software•Las Vegas, NV

About The Position

Take-Two Interactive Software is seeking a Threat Intelligence Engineer to help operationalize intelligence and develop engineering solutions that counter emerging security threats. The role works with security and technology teams to integrate threat data into the organization’s security infrastructure and help protect Take-Two and its labels’ systems, networks, and data. The position is part of Take-Two’s Information Security teams and reports to the Director of Threat Intelligence.

Requirements

2–4 years of experience in cybersecurity, including at least 1–2 years focused on threat intelligence, security engineering, or security operations (SOC).
Solid understanding of network fundamentals, operating system internals, common attack vectors, and the cyber threat landscape.
Experience working with APIs, data formats such as JSON, XML, and STIX/TAXII, and systems integration to streamline security workflows.
Ability to analyze information from sources such as open-source intelligence, technical reports, and internal logs to draw technical conclusions and identify malicious activity.
Familiarity with threat intelligence and security frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
Strong written and verbal communication skills, including the ability to document engineering processes and communicate threat findings clearly.
Hands-on experience with SIEM systems, threat intelligence platforms (TIPs), or EDR solutions.

Nice To Haves

Proficiency in scripting languages such as Python, PowerShell, or Bash for automating data collection, API interactions, and analysis tasks.
Relevant industry certifications such as CompTIA Security+/CySA+, GIAC (GSEC, GCTI), or similar intermediate credentials.
Familiarity with securing and monitoring cloud environments such as AWS, Azure, or GCP.
Basic understanding of malware analysis or reverse engineering concepts.

Responsibilities

Support day-to-day cyber threat intelligence program operations by managing threat feeds, parsing indicators of compromise (IOCs), and ensuring data quality across platforms.
Analyze emerging threats and adversary tactics, techniques, and procedures (TTPs) to help engineer detection and prevention mechanisms.
Collaborate with the Global Security Operations Center (GSOC), Detection Engineering, and Incident Response teams to ingest and operationalize intelligence in SIEM, EDR, and firewall systems.
Build and maintain API integrations, scripts, and playbooks to automate indicator ingestion, correlation, and dissemination across security platforms.
Assist with deployment, configuration, maintenance, and tuning of Threat Intelligence Platforms (TIPs) and related security engineering tools.
Assist in producing timely intelligence alerts, briefs, and tactical reports that provide technical teams with context about active threats.