Technical Cyber Threat Investigator

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Threat Intelligence team protects OpenAI’s technology, people, research, and infrastructure by proactively identifying and disrupting adversaries who seek to compromise our systems or misuse our models. We investigate sophisticated threats, build tooling to scale and augment analysis, and deliver intelligence that shapes security strategy and equips leadership with timely, risk-aware insights. We combine technical depth, investigative rigor, and strong cross-functional partnerships to uncover threats and drive impact across OpenAI’s security and research organizations. About the Role As a Technical Threat Investigator at OpenAI, you will help protect the company from sophisticated adversaries targeting OpenAI and the broader ecosystem, as well as those attempting to misuse our models in support of cyber operations. This is a deeply investigative role. You will independently conduct complex, end-to-end investigations into capable threat actors to understand their behavior, infrastructure, emerging techniques, and how AI is integrated into their workflows. You’ll use these insights to proactively identify malicious activity and drive detection, disruption, enforcement, and safety improvements across the company. You’ll translate your investigative findings into durable solutions that scale impact. You’ll build and own lightweight tooling, automate where it matters, and create AI-assisted workflows to make investigations faster, more repeatable, and more effective over time. In this role, you will: Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI’s models, products, and broader ecosystem. Think like an adversary — model attacker behavior, anticipate misuse patterns, and proactively hunt for, identify, and disrupt malicious activity. Leverage internal telemetry, OSINT, vendor data, a

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Threat Intelligence team protects OpenAI’s technology, people, research, and infrastructure by proactively identifying and disrupting adversaries who seek to compromise our systems or misuse our models. We investigate sophisticated threats, build tooling to scale and augment analysis, and deliver intelligence that shapes security strategy and equips leadership with timely, risk-aware insights. We combine technical depth, investigative rigor, and strong cross-functional partnerships to uncover threats and drive impact across OpenAI’s security and research organizations. About the Role As a Technical Threat Investigator at OpenAI, you will help protect the company from sophisticated adversaries targeting OpenAI and the broader ecosystem, as well as those attempting to misuse our models in support of cyber operations. This is a deeply investigative role. You will independently conduct complex, end-to-end investigations into capable threat actors to understand their behavior, infrastructure, emerging techniques, and how AI is integrated into their workflows. You’ll use these insights to proactively identify malicious activity and drive detection, disruption, enforcement, and safety improvements across the company. You’ll translate your investigative findings into durable solutions that scale impact. You’ll build and own lightweight tooling, automate where it matters, and create AI-assisted workflows to make investigations faster, more repeatable, and more effective over time. In this role, you will: Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI’s models, products, and broader ecosystem. Think like an adversary — model attacker behavior, anticipate misuse patterns, and proactively hunt for, identify, and disrupt malicious activity. Leverage internal telemetry, OSINT, vendor data, a

The Team: As a Security Engineer 2 on the Cyber Threat Intelligence team, you will help Datadog stay ahead of evolving threats by identifying, analyzing, and operationalizing intelligence on threat actors, campaigns, and emerging threats. Working within Security Engineering, you will partner closely with security teams to translate intelligence into actionable security improvements across the company. You will serve as a subject matter expert on how the cyber threat landscape intersects with Datadog and contribute to intelligence-led decision making during both steady-state operations and active security incidents. This role provides opportunities to influence detection, response, and security strategy through technical analysis, collaboration, and intelligence-driven initiatives. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Develop and maintain tooling that automates the collection, processing, analysis, and dissemination of threat intelligence. Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog. Conduct threat hunting and infrastructure analysis to identify adversary activity relevant to Datadog and improve defensive controls. Partner with security teams to operationalize intelligence into detections, investigations, and response workflows. Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence. Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders. Who You Are: Experienced in writing and presenting operational and technical intelligence for threat detection, response, and security stakeholders. Skilled in partnering with detection and response te

The Opportunity Our Adobe Cyber Defense Center seeks a skilled and curious Senior Cyber Incident Responder eager to tackle new technologies. You'll use your digital forensics and network-based investigation expertise in this crucial role to boost our incident response capabilities. Collaborating with a multinational team, you'll conduct thorough investigations and defend our enterprise against evolving cyber threats. If you thrive in a challenging environment and are ready to enhance our Incident Response program, we want to hear from you! What you will do Incident Response Experience : Respond to incidents to retrieve, analyze, and preserve critical data, utilizing forensics and network knowledge on a global scale. Conduct thorough host forensics, network forensics, log analysis, and malware triage to arrive at conclusive findings and support incident response investigations. Tool Development : Identify areas for improvement in processes and tooling related to response at scale. Develop and enhance scripts, tools, and methodologies to support the collection and analysis of data on a large scale, optimizing our incident investigation capabilities. Team Support and Mentorship: Provide support and guidance to other members of our CSIRT team, working closely with Staff level responders and management. Global Reporting and Coordination : Translate technical analysis into clear reports and coordinate response actions with team members globally. Assist in drafting detailed reports and assigning remediation recommend dations across internal and external organizations. Training and Presentations: Develop and present comprehensive training sessions and presentations for both technical and non-technical audiences. Global Collaboration : As an expert in the field, work closely with teams globally during incidents, including threat hunting,

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Threat Intelligence Engineer, you'll combine deep technical expertise in tracking sophisticated adversaries with innovative AI engineering to protect billions of dollars in digital assets. You'll turn internal and external signals into durable detections and actionable intelligence, partnering across the entire organization to bring insights directly to the stakeholders who make risk-based decisions. What you'll do : Automate the tracking and analysis of sophisticated cyber threats targeting Coinbase's customers, employees, products, and infrastructure Influence decisions across the organization by reporting and presenting intelligence analysis to stakeholders, partners, and executives Model and curate our shared view of the threat landscape within Vertex Synapse, our Threat Intelligence Platform, while elevating analytic quality through critical peer review and strategic feedback Cultivate strategic relationships within Threat Intelligence communities to expand access to information and strengthen our trust network Investigate and deliver on a high volume of intelligence requests by prioritizing, documenting, and reporting timely and accurate information Serve as subject matter expert on the latest cyber

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: On-NET Operator Job Type: Full-time Location: Sterling or Reston, VA (Hybrid) Clearance Requirements: Active TS/SCI required Experience: 7+ years WHAT YOU'LL DO We are seeking a skilled and motivated On-Net Operators to support advanced offensive cyber operations and mission-focused assessments for federal customers. The ideal candidate will possess deep technical expertise in networking, operating systems, digital forensics, and adversary tradecraft, with the ability to analyze complex environments, identify vulnerabilities, and emulate sophisticated threat actors. This role requires a highly analytical and self-motivated professional who can operate independently, lead small teams, and solve complex technical challenges in support of critical national security missions. KEY RESPONSIBILITIES Operations Conduct cyber operations and adversary emulation activities against complex environments. Analyze networks, systems, applications, and code to identify vulnerabilities and attack paths. Perform network traffic analysis, digital forensics, and technical investigations. Develop and execute creative solutions to achieve operational objectives. Technical Analysis & Development Utilize advanced networking, tunneling, and system-level expertise to support mission requirements. Analyze and manipulate Linux and Windows operating systems, filesystems, and network services. Develop and modify tools, scripts, and automation using languages such as Python, Bash, and C. Assess network protocols, encryption techniques, and enterprise environments. Collaboration & Leadership O