Cybersecurity Integration Engineer

About the role

SISAP is looking for a passionate Cybersecurity Integration Engineer to design, develop, implement and maintain integrations between Threat Intelligence platforms and security operations ecosystems. You will ensure that the right intelligence reaches the appropriate tools to enhance detection, automated response and threat hunting.

Key responsibilities

• Design and build end‑to‑end integrations for Threat Intelligence feeds and security platforms.
• Implement data parsing, normalization, error handling and deduplication pipelines.
• Maintain and improve existing integrations, ensuring reliability and scalability.
• Collaborate with SOC, Threat Hunting and Detection Engineering teams to align integration outputs with operational needs.
• Document integration architectures, APIs and operational procedures.

Required profile

• University degree in Computer Science, Information Systems, Cybersecurity or a related field.
• 2+ years of experience in cybersecurity, SOC, or integration engineering.
• Proven track record developing integrations for clients, not just supporting existing ones.
• Advanced English communication skills.

Required skills

• Experience with SIEM/SOAR platforms such as Splunk, QRadar, Microsoft Sentinel or Elastic.
• Strong knowledge of REST APIs, JSON, syslog, CEF/LEEF, NetFlow/IPFIX.
• Proficiency in scripting/programming – Python (preferred) and familiarity with JavaScript, PowerShell or Go.
• Understanding of Threat Intelligence concepts, IOCs, STIX/TAXII, and threat hunting.
• Ability to parse, normalize, handle errors and deduplicate event data.

What we offer

• Opportunity to work on regional cybersecurity projects with real client impact.
• Collaboration with experts in SOC, Threat Hunting and Detection Engineering.
• Environment that values initiative, results orientation and continuous learning.