Security Threat Intelligence Analyst Jobs

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Threat Intelligence Engineer is responsible for engineering, operating, and continuously improving WPP’s cyber threat intelligence platforms, integrations, and enrichment pipelines. This role focuses on how threat intelligence is ingested, processed, correlated, and operationalised at scale across security operations. The position is an engineering-led individual contributor role with no people management responsibilities. What you'll be doing: Engineer and maintain threat intelligence platforms and data sources. Design ingestion pipelines for external, internal, and open-source intelligence feeds. Maintain centralised repositories for indicators, threat actor artefacts, and metadata. Integrate threat intelligence into SIEM, SOAR, EDR/XDR, email, identity, and cloud tooling. Build enrichment pipelines linking incidents to threat actors, campaigns, and TTPs. Partner with Automation Engineering to ensure intelligence is automation-first. Provide engineered intelligence support to Incident Response during active incidents. Enable Detection Engineering and Threat Hunting with

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-mak

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s unique game development studio in Oakville, ON. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay cur

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s new state-of-the-art game development studio in Carlsbad, CA. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. &n

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s game development studio in Andover, MA. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay current on

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay curren

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Threat Intelligence Analyst Overview This is an exciting position for a Lead Threat Intelligence Analyst to join Vocalink’s dedicated Threat Intelligence function. You will be play an integral leading role in the Vocalink Threat Intelligence Team, working closely with the SOC and internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection. Collaboration is at the heart of this position. You will work alongside Mastercard’s global threat intelligence capabilities and engage proactively with a wide network of stakeholders, including vendors, industry groups, our customers, and government organisations. This is a unique chance to help shape and grow a fast-evolving threat intelligence capability that serves Vocalink and its customers. If you are passionate about cyber security and eager to make an impact, this role offers an exciting platform to develop your leadership expertise and to help to grow and mature a threat intelligence function in a critical national infrastructure provider. Role Lead the day-to-day operations of the threat intelligence function within the Vocalink Security Operations Cent

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations, you'll own Vertex Synapse in production - the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase. The TI team protects billions of dollars in digital assets by collecting, modeling, and operationalizing intelligence on the most sophisticated cyber threats targeting the crypto ecosystem. You'll keep the platform healthy, ingest and model new intelligence sources, and ship the automations that weave threat intelligence into the fabric of security operations at Coinbase. What you'll do: Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows Partner across Security and Product to translate intelligence requirements into production capabilities Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders Required Skills and Experience: 2+ years building and operating threat intelligence platforms or security data pipelines in produc

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE Everpure is seeking a hands-on Senior Security Engineer to drive security operations from our Prague, Czech Republic location. In this role, you will contribute to operational excellence across incident response, threat hunting, threat intelligence integration, detection engineering, and security automation, bringing real-time visibility and rapid response to our 24/7 global security operations environment. This is a technical delivery and execution role , not a traditional monitoring position. You will work closely with detection engineers, threat intelligence analysts, incident response leadership, and our global Security Operations teams to build and refine detections, improve signal quality, execute threat hunts, automate workflows, and respond to complex security incidents with speed and precision. Success in this role is measured not by alert volume, but by signal quality, real threat detection, incident containment speed, automation maturity, and the effectiveness of response workflows . WHAT YOU'LL DO Detection Engineering: Design, implement, and maintain detections in Splunk and related security platforms. Develop detection-as-code content using formats such as YAML/JSON, incorporate unit and regression testing, map coverage to MITRE ATT&CK, and contribute to Sigma/YARA-L coverage expansion. Incident Response & Triage: Investigate suspicious activity and participate in incident triage, scoping, co

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Abuse Research team is dedicated to proactively hunting for emerging abuse vectors and studying complex attacker behaviors. Rather than just reacting to alerts, the team maps complete abuse paths across Stripe products and external systems to validate novel findings and explain the underlying product conditions that enable fraud. By building continuous abuse tests with agentic testing and related systems, they translate their deep research into actionable threat advisories, strategic control recommendations, and regression scenarios that fortify Stripe’s defenses. What you’ll do You will lead the Abuse Research Group (ARG)—a team of threat intelligence analysts, fraud researchers, and detection engineers focused on proactively identifying and mitigating threats to Stripe and our merchants. You will set the research agenda, guiding work across threat actor tracking, hands-on fraud investigations, merchant ecosystem defense, and the detection pipelines that turn findings into production enforcement. You will scale the team through hiring, coaching, and talent development, while serving as a technical advisor on complex investigations. You will also own ARG's relationships with key partners—including Risk, Trust & Safety, Fraud Platform, and Security Engineering. Lead, develop, and retain a team of threat intelligence analysts, fraud researchers, and detection engineers who thrive at the intersection of adversarial research an

About the Team The Corporate Security team ensures the physical safety and security of the organization's assets, operations, and personnel. We are committed to maintaining a secure environment that enables our team to focus on advancing artificial intelligence in a responsible manner. About the Role As a Protective Intelligence & Threat Analyst, you will identify, assess, and communicate physical security threats affecting OpenAI, its personnel, executives, operations, and assets. You will leverage open-source intelligence, social media, investigative tools, and other information sources to assess violent or disruptive threats, geopolitical developments, and emerging risks relevant to the company. The role will support a broad range of Protective Intelligence activities, including persons of interest investigations, behavioral threat assessment, executive and individual risk assessments, event and travel security assessments, and time-sensitive intelligence support to Corporate Security and cross-functional partners. You will turn complex and often incomplete information into clear assessments and actionable recommendations that help inform security and protective decisions. We are seeking candidates with intelligence experience, particularly in protective intelligence, threat investigations, or behavioral threat assessment. Successful candidates will understand the intelligence cycle, OSINT investigative techniques, corporate physical security, risk management, and threat assessment, and will be comfortable operating independently in a fast-moving environment involving sensitive and occasionally high-profile matters. This role could be based in San Francisco, CA, or may be a remote role for the right candidate. We use a hybrid work model of 3 days in the office per week. Relocation offered for those outside of the Bay Area. In this role, you will: Identify and investigate potential physical threats to OpenAI, its executives, employees, facilities, operations,

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. CLEAR is seeking a Threat Detection Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you. What you'll do: Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis Continuously evaluate CLEAR’s detection coverage against the evolving threat land

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. CLEAR is seeking a Senior Security Operations Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you. What you'll do: Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis Continuously evaluate CLEAR’s detection coverage against the evolving t

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Logistics Security Intelligence Analyst supports Micron’s global logistics security program by producing timely, actionable intelligence on shipment risk, cargo theft trends, route exposure, carrier performance, alert activity, and logistics security incidents. This individual contributor role helps strengthen shipment visibility, support incident response, and enable data-driven decisions for valuable and sensitive shipments across Micron’s transportation network. Responsibilities: Collect, analyze, and report on logistics security data related to high-value and high-risk shipments, including shipment value, route risk, carrier performance, tracking status, alert activity, and incident history. Monitor internal, vendor, industry, open-source, and law-enforcement sources for cargo theft trends, route disruptions, regional security developments, and emerging threats. Prepare intelligence summaries, dashboards, route profiles, regional threat updates, incident trend reports, and briefing materials for logistics security leaders and multi-functional collaborators. Support lane, route, carrier, provider, and regional risk assessments by identifying risk indicators, documenting findings, and helping translate analysis into practical control recommendations. Analyze shipment monitoring alerts such as route deviation, unauthorized stop, signal loss, seal breach, geofence violation, cargo separation, and other logistics security events. Support blocking issue and incident response a

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations - Bengaluru, India About the Role Cloudflare is a system spanning the globe, on a mission to make the internet safer and more powerful everyday. To help fulfill this mission, we are seeking a talented Incident Response Analyst to join us in growing our Cloudforce One REACT organization. In this role, you will be instrumental in building a proactive and threat intelligence-driven approach to protecting Cloudflare and its cu