Principal Cyber Threat Intelligence Engineer

Join to apply for the Principal Cyber Threat Intelligence Engineer IS role at Providence
. This role is part of Enterprise Information Services and is available for hybrid work within a 65‑mile commute from primary office locations.

• Conduct in‑depth analysis and research on cyber threats, including identifying threat actors, motivations, tactics, techniques, and procedures (TTPs), and providing insights on their potential impact.
• Prepare and deliver well‑researched, impactful analytic findings to technical and non‑technical stakeholders, including executives.
• Serve as a mentor to teammates on advanced analytic toolsets such as Structured Analytic Techniques.
• Classify, categorize, and analyze malware and threats, translating into actionable detections using frameworks like MITRE ATT&CK.
• Maintain breadth and depth of knowledge of the healthcare industry threat landscape.
• Collaborate with internal teams to provide timely, actionable intelligence for CTI, CIRT, Attack Surface Management, and other cybersecurity initiatives.
• Develop and maintain threat profiles with tactical intelligence to enhance detection engineering and threat‑hunting operations.
• Perform root‑cause analysis and recommend proactive measures to prevent cyber intrusions.
• Continuously update and refine threat intelligence processes and methodologies.
• Stay informed about latest trends, tools, and techniques in threat intelligence.
• Monitor emerging technologies such as AI and machine learning to enhance threat detection, triage, and analysis.

• Bachelor's Degree in Computer Engineering, Computer Science, Mathematics, Engineering, or equivalent education/experience.
• Upon hire: CISSP, CEH, or an equivalent certification.
• 8 or more years of related experience.
• Experience designing security controls and countermeasures for operating systems, databases, applications, web services, user devices, and wireless networks.

• Master's Degree in a related field.
• Experience in a healthcare environment.
• 8 or more years of cyber threat intelligence analysis experience.
• Experience conducting deep threat research, including motivations, intent, and TTPs.
• Skill in correlating intelligence from multiple sources.
• Familiarity with reverse engineering and malware categorization.
• Strong knowledge of healthcare cybersecurity risks (ransomware, phishing, supply chain).
• Experience applying frameworks such as MITRE ATT&CK, Cyber Kill Chain, Diamond Model, etc.
• Experience working cross‑functionally with CIRT/IR, vulnerability management, SOC operations.
• Experience with insider threat teams a plus.
• Capability to develop threat profiles and integrate tactical intelligence into detection rules.
• Ability to influence risk‑based decision‑making with clear, concise reporting.

• Washington:
  Seattle, Redmond, Renton, Vancouver
• California:
  Los Angeles, Irvine
• Oregon:
  Portland

• California (Los Angeles & Irvine): $71.23–$121.29 per hour
• Oregon (Portland): $68.33–$116.36 per hour
• Washington (Seattle, Renton, Redmond): $71.23–$121.29 per hour
• Washington (Vancouver): $68.33–$116.36 per hour

Providence offers a comprehensive benefits package including retirement 401(k) savings plan with matching, health, dental, vision, life, disability, paid parental leave, vacations, holidays, and wellness resources.

Applicants located in the unincorporated County of Los Angeles may qualify under local fair‑chance ordinances.

Providence is an Equal Opportunity Employer dedicated to inclusivity and diversity.

Requisition  | Company:
Providence Jobs | Job Category:
Information Security | Job Function:
Information Technology |

Schedule:

Full time |

Shift: Day | Career Track:
Business Professional | Department: 4011 SS IS ESI CYBER | Address: CA Irvine 15480 Laguna Canyon Rd |

Work Location:

Providence System Offices Discovery Park‑Irvine | Workplace Type:
Hybrid

Applicants are encouraged to reflect, apply now, and join our team.