Principal Cyber Threat Intelligence Engineer - Hybrid (Enterprise Information Services). Providence Health & Services seeks an experienced principal security engineer with deep expertise in cyber threat intelligence.

In this pivotal role you will be the strategic force behind identifying and neutralizing emerging threats, safeguarding critical systems, and empowering Providence's Global Security Operations Center. Your insights will directly inform risk strategies and guide executive decision-making, protecting millions of lives through secure healthcare technology.

Hybrid Work Locations

• Washington - Seattle, Redmond, Renton, Vancouver
• California - Los Angeles, Irvine
• Oregon - Portland

Hybrid Work Details

• Combination of in-office and remote work each week.
• Weekly schedule determined by manager based on departmental needs.

• Conduct in-depth analysis and research on cyber threats, identifying threat actors, motives, tactics, techniques, and procedures (TTPs).
• Prepare and deliver well-researched, impactful analytic findings tailored for technical and non-technical stakeholders, including executives.
• Mentor teammates on advanced analytic toolsets such as Structured Analytic Techniques.
• Classify, categorize, and analyze malware and threats; translate into actionable detections using frameworks such as MITRE ATT&CK.
• Maintain breadth and depth of knowledge about the healthcare industry threat landscape.
• Collaborate with internal teams to provide timely and actionable intelligence supporting CTI, CIRT, Attack Surface Management, and other cybersecurity initiatives.
• Develop and maintain threat profiles to enhance detection engineering and threat hunting operations.
• Perform root cause analysis and recommend proactive measures to prevent cyber intrusions.
• Continuously refine threat intelligence processes and methodologies.
• Stay informed about emerging technologies, including AI and machine learning, to augment threat detection, triage, and analysis.

• Bachelor's Degree in Computer Engineering, Computer Science, Mathematics, Engineering, or equivalent education/experience.
• Upon hire: CISSP, CEH, or equivalent certification.
• 8 or more years of related experience.
• Experience designing security controls and countermeasures for operating systems, databases, applications, web services, user devices, and wireless networks.

• Master's Degree in Computer Engineering, Computer Science, Mathematics, Engineering.
• Experience in a healthcare environment.
• 8 or more years of cyber threat intelligence analysis experience.
• Experience conducting in-depth analysis and research on cyber threats, including identifying threat actors' motivations, intent, and TTPs.
• Skill in correlating intelligence from multiple sources to assess potential organizational impact.
• Familiarity with reverse engineering and categorizing malware.
• Strong knowledge of healthcare cybersecurity risks.
• Experience applying frameworks such as MITRE ATT&CK, Cyber Kill Chain, Diamond Model of Intrusion Analysis, etc.
• Experience working cross-functionally with CIRT/IR teams, vulnerability management, and SOC operations.
• Experience with insider threat teams a plus.
• Capability to develop threat profiles and integrate tactical intelligence into detection rules.
• Ability to influence risk-based decision-making with clear, concise reporting.

• California - Los Angeles & Irvine: Min $71,230 - Max $121,290.
• Oregon - Portland Service Area: Min $68,330 - Max $116,360.
• Washington - Seattle, Renton, Redmond: Min $71,230 - Max $121,290.
• Washington - Vancouver: Min $68,330 - Max $116,360.

Providence offers a comprehensive benefits package, including a retirement 401(k) Savings Plan with employer matching, health care benefits (medical, dental, vision), life and disability insurance, paid parental leave, vacations, holidays, and well-being resources. Learn more at providence.jobs/benefits.

Providence is a proud Equal Opportunity Employer. We are committed to providing a workplace free from unlawful discrimination and harassment on the basis of race, color, gender, disability, veteran, military status, religion, age, creed, national origin, sexual identity or expression, sexual orientation, marital status, genetic information, or any other basis prohibited by local, state, or federal law.