Threat Intelligence Engineer at Black Duck

Location: Belfast, Northern Ireland
Level: not_specified
Posted: Jul 23, 2026

Description

The Threat Intelligence Engineer at Black Duck Software, Inc. focuses on collecting, analyzing, and disseminating threat data to enhance enterprise security. The role involves creating intelligence products, managing indicator pipelines, and integrating threat context into security workflows. Responsibilities include drafting threat actor profiles, validating IOCs, monitoring open-source package registries, and supporting various cybersecurity initiatives like alert triage and DLP investigation.

Required Skills

threat intelligence
security operations
threat hunting
cybersecurity
intelligent production lifecycle
threat actor profiling
STIX 2.1
MITRE ATT&CK
enterprise SIEM
EDR environments

Additional Information

Required Previous Experiences: two (2) years of experience in threat intelligence, security operations, threat hunting, or a closely related cybersecurity role
Preferred Qualifications: Working familiarity with the intelligence production lifecycle, threat actor profiling concepts, and structured formats (e.g., STIX 2.1); ability to apply MITRE ATT&CK for basic TTP mapping.
Practical experience working within enterprise SIEM or EDR environments; ability to run queries, review alerts, and support detection validation (current platforms include Sumo Logic and CrowdStrike Falcon/NG SIEM).
Conceptual understanding of adversarial techniques targeting open-source ecosystems — including typosquatting, dependency confusion, registry abuse, and build-pipeline compromise — and the ability to identify relevant indicators.
Strong written and verbal English communication skills; able to explain moderately complex threat information clearly to peers and adjacent teams; comfortable escalating appropriately under moderate supervision.

About Black Duck

Black Duck

application security testing

Black Duck provides True Scale Application Security for the regulated, AI-powered world, freeing organizations from tradeoffs between speed, accuracy, and compliance at scale while eliminating software risks. We offer cloud-based and on-prem software security analysis tools with flexible and comprehensive issue detection, automatically identifying open source dependencies and helping to secure the software supply chain.