Security Threat Intelligence Analyst Jobs

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Threat Intelligence Engineer is responsible for engineering, operating, and continuously improving WPP’s cyber threat intelligence platforms, integrations, and enrichment pipelines. This role focuses on how threat intelligence is ingested, processed, correlated, and operationalised at scale across security operations. The position is an engineering-led individual contributor role with no people management responsibilities. What you'll be doing: Engineer and maintain threat intelligence platforms and data sources. Design ingestion pipelines for external, internal, and open-source intelligence feeds. Maintain centralised repositories for indicators, threat actor artefacts, and metadata. Integrate threat intelligence into SIEM, SOAR, EDR/XDR, email, identity, and cloud tooling. Build enrichment pipelines linking incidents to threat actors, campaigns, and TTPs. Partner with Automation Engineering to ensure intelligence is automation-first. Provide engineered intelligence support to Incident Response during active incidents. Enable Detection Engineering and Threat Hunting with

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-mak

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s unique game development studio in Oakville, ON. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay cur

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s new state-of-the-art game development studio in Carlsbad, CA. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. &n

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s game development studio in Andover, MA. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay current on

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan. WHAT WE DO The Rockstar Game Security team is responsible for protecting our players, employees, and intellectual property. We support all Rockstar titles from malicious actors and insider threats. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Identify and prevent fraudulent or malicious behavior using open-source intelligence (OSINT), internal tools, and investigative methods. Own complex investigations, including data collection, analysis, and synthesis from multiple systems. Maintain intelligence on relevant subjects and emerging threats. Ensure consistent, high-quality investigative reporting and intelligence outputs. Support response efforts for security incidents and escalations as needed. Drive process improvements, including automation and tooling to scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay curren

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Threat Intelligence Analyst Overview This is an exciting position for a Lead Threat Intelligence Analyst to join Vocalink’s dedicated Threat Intelligence function. You will be play an integral leading role in the Vocalink Threat Intelligence Team, working closely with the SOC and internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection. Collaboration is at the heart of this position. You will work alongside Mastercard’s global threat intelligence capabilities and engage proactively with a wide network of stakeholders, including vendors, industry groups, our customers, and government organisations. This is a unique chance to help shape and grow a fast-evolving threat intelligence capability that serves Vocalink and its customers. If you are passionate about cyber security and eager to make an impact, this role offers an exciting platform to develop your leadership expertise and to help to grow and mature a threat intelligence function in a critical national infrastructure provider. Role Lead the day-to-day operations of the threat intelligence function within the Vocalink Security Operations Cent

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations, you'll own Vertex Synapse in production - the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase. The TI team protects billions of dollars in digital assets by collecting, modeling, and operationalizing intelligence on the most sophisticated cyber threats targeting the crypto ecosystem. You'll keep the platform healthy, ingest and model new intelligence sources, and ship the automations that weave threat intelligence into the fabric of security operations at Coinbase. What you'll do: Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows Partner across Security and Product to translate intelligence requirements into production capabilities Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders Required Skills and Experience: 2+ years building and operating threat intelligence platforms or security data pipelines in produc

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE Everpure is seeking a hands-on Senior Security Engineer to drive security operations from our Prague, Czech Republic location. In this role, you will contribute to operational excellence across incident response, threat hunting, threat intelligence integration, detection engineering, and security automation, bringing real-time visibility and rapid response to our 24/7 global security operations environment. This is a technical delivery and execution role , not a traditional monitoring position. You will work closely with detection engineers, threat intelligence analysts, incident response leadership, and our global Security Operations teams to build and refine detections, improve signal quality, execute threat hunts, automate workflows, and respond to complex security incidents with speed and precision. Success in this role is measured not by alert volume, but by signal quality, real threat detection, incident containment speed, automation maturity, and the effectiveness of response workflows . WHAT YOU'LL DO Detection Engineering: Design, implement, and maintain detections in Splunk and related security platforms. Develop detection-as-code content using formats such as YAML/JSON, incorporate unit and regression testing, map coverage to MITRE ATT&CK, and contribute to Sigma/YARA-L coverage expansion. Incident Response & Triage: Investigate suspicious activity and participate in incident triage, scoping, co

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Abuse Research team is dedicated to proactively hunting for emerging abuse vectors and studying complex attacker behaviors. Rather than just reacting to alerts, the team maps complete abuse paths across Stripe products and external systems to validate novel findings and explain the underlying product conditions that enable fraud. By building continuous abuse tests with agentic testing and related systems, they translate their deep research into actionable threat advisories, strategic control recommendations, and regression scenarios that fortify Stripe’s defenses. What you’ll do You will lead the Abuse Research Group (ARG)—a team of threat intelligence analysts, fraud researchers, and detection engineers focused on proactively identifying and mitigating threats to Stripe and our merchants. You will set the research agenda, guiding work across threat actor tracking, hands-on fraud investigations, merchant ecosystem defense, and the detection pipelines that turn findings into production enforcement. You will scale the team through hiring, coaching, and talent development, while serving as a technical advisor on complex investigations. You will also own ARG's relationships with key partners—including Risk, Trust & Safety, Fraud Platform, and Security Engineering. Lead, develop, and retain a team of threat intelligence analysts, fraud researchers, and detection engineers who thrive at the intersection of adversarial research an

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role You will be a strategic contributor to our cybersecurity marketing efforts, positioning Claude as the trusted AI partner for CISOs, security operations teams, threat intelligence analysts and beyond. This is an important role that requires deep understanding of the cybersecurity ecosystem combined with the ability to craft compelling positioning and messaging around AI's benefit to defenders and the organizations they protect. Working closely with sales, product, partnerships and communications teams, you'll be responsible for bringing cybersecurity launches, features, and messaging to market through various channels while ensuring cohesive positioning across audiences. This role needs someone who can set vision and strategy while being hands-on with execution, from launching product capabilities for security operations and sector-specific tools to quarterbacking demand generation campaigns that drive adoption. Working at the intersection of AI safety, the evolving threat landscape, and campaigns, you'll help shape industry conversations around AI's role in cyber defense that drive measurable pipeline and impact results. Key responsibilities Coordinate and execute a comprehensive marketing strategy for cybersecurity across key segments: enterprise security operations, threat intelligence, detection and response, governance/risk/compliance, MSSPs and more Craft differentiated positioning and messaging across solutions pages, campaign materials and content for distinct audiences within the vertical Support go-to-market for product and solution launches including sector-specific offerings and relevant MCP integrations and

About the Team The Corporate Security team ensures the physical safety and security of the organization's assets, operations, and personnel. We are committed to maintaining a secure environment that enables our team to focus on advancing artificial intelligence in a responsible manner. About the Role As a Protective Intelligence & Threat Analyst, you will identify, assess, and communicate physical security threats affecting OpenAI, its personnel, executives, operations, and assets. You will leverage open-source intelligence, social media, investigative tools, and other information sources to assess violent or disruptive threats, geopolitical developments, and emerging risks relevant to the company. The role will support a broad range of Protective Intelligence activities, including persons of interest investigations, behavioral threat assessment, executive and individual risk assessments, event and travel security assessments, and time-sensitive intelligence support to Corporate Security and cross-functional partners. You will turn complex and often incomplete information into clear assessments and actionable recommendations that help inform security and protective decisions. We are seeking candidates with intelligence experience, particularly in protective intelligence, threat investigations, or behavioral threat assessment. Successful candidates will understand the intelligence cycle, OSINT investigative techniques, corporate physical security, risk management, and threat assessment, and will be comfortable operating independently in a fast-moving environment involving sensitive and occasionally high-profile matters. This role could be based in San Francisco, CA, or may be a remote role for the right candidate. We use a hybrid work model of 3 days in the office per week. Relocation offered for those outside of the Bay Area. In this role, you will: Identify and investigate potential physical threats to OpenAI, its executives, employees, facilities, operations,

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. CLEAR is seeking a Threat Detection Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you. What you'll do: Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis Continuously evaluate CLEAR’s detection coverage against the evolving threat land

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. CLEAR is seeking a Senior Security Operations Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you. What you'll do: Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis Continuously evaluate CLEAR’s detection coverage against the evolving t

Become a part of our caring community The Senior Strategic and Operational Intelligence Analyst delivers proactive, forward-looking analysis of the cyber threat landscape and translates that analysis into direction and action for Humana's information security organization. You will set the strategic threat picture that guides CTI collection, processing, and analysis while supporting the development of proactive countermeasures that reduce Humana's exposure before threats materialize. Working with operational analysts, the analyst ensures strategic analysis translates into operational outcomes by shaping what CTI tracks, what partners act on, and where Humana strengthens its preparedness. The analyst applies AI, automation, and disciplined analysis to identify what matters most, anticipate changes in the threat landscape, and lead action on priority cyber threats. The analyst is comfortable working directly with threat and security data, exploring patterns, testing hypotheses, and combining quantitative evidence with qualitative intelligence to produce defensible assessments and practical recommendations. Main Responsibilities Threat Prioritization Own the actor and threat prioritization framework that guides CTI's operational focus, collection posture, and countermeasure development Identify priority threats and actors relevant to Enterprise Information Protection, Technology, Business, and Enterprise partners; ensure prioritization reflects sector-specific and Humana-specific risk Continuously update the prioritization frameworks as the threat landscape shifts, using AI and automation to help build and maintain them at sca