About this role
Designing internal tooling and data pipelines for acquiring and parsing recaptured underground data forms the core daily work in this position. Operating within SpyCloud Labs, the in-house Security Research team, engineers build automation and cloud infrastructure to facilitate the collection of third-party breach and malware information. Team members collaborate directly with researchers to support targeting efforts, deploy CI/CD pipelines, and continuously improve ETL workflows while participating in threat investigations.
The role exists to strengthen defenses against cybercrime by scaling the acquisition of critical intelligence using public cloud infrastructure. Ideal candidates are self-directed software developers with strong Python capabilities and experience with Infrastructure as Code technologies who thrive in collaborative problem-solving environments.
What you will do
- Design, implement, and maintain internal tooling for acquiring and parsing recaptured underground data.
- Build and deploy cloud infrastructure using Infrastructure as Code technologies.
- Build and deploy automated CI/CD pipelines to test and deploy tooling and infrastructure.
- Collaborate directly with the research team to support the targeting and collection of new data sources.
- Identify improvements and automation opportunities in the recaptured data workflow and ETL pipelines.
- Participate in security research including the investigation of threat actors, malware, and other critical research in support of company priorities.
What you need
- Bring at least 4 years of professional software development experience, preferably in the cybersecurity industry.
- Demonstrate high skill with Python and general proficiency in software design.
- Show hands-on experience building internal tooling and deploying using Infrastructure as Code technologies such as Terraform and Ansible.
- Hold a Bachelor's degree, or equivalent experience, in Math, Science, Engineering, or Business fields.
- Work independently as a self-directed professional capable of identifying and delivering tasks with minimal direct supervision.
- Apply critical thinking and strong communication skills to support collaborative problem solving in a team environment.
Nice to have
- Experience working with large enterprises in delivery of security analytics products
- Experience in acquiring and processing malware-exfiltrated data
- Experience in using data science to analyze datasets for the purposes of detecting fraud or cyberthreats
- Experience with databases (relational or NoSQL) and designing efficient database architecture
Benefits
- 401(k) with Employer Contribution
- Health, Vision, and Dental Insurance
- Health Savings Account (HSA) available with Employer Contribution
- Employer Paid Life, Short-term, and Long-term Disability Insurance
- Generous PTO Plan and 16 paid holidays per year
Skills and tech stack
Questions candidates ask
Is this a remote position?
This is a full-time remote role supporting a hybrid workforce. Employees also have access to an engaging workspace in South Austin.
What is the salary range for this role?
The base salary range is $108,000 to $140,000. This range reflects the expected base compensation for a fully qualified candidate at this level based on experience, qualifications, and market data at the time of posting.
What team will I be working on?
This role will be within SpyCloud Labs, which is SpyCloud's in-house Security Research team. The team focuses on building automation and other internal tooling to facilitate the collection of recaptured third-party breach and malware data.