Security Threat Intelligence Analyst Jobs

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role AlphaSense is maturing its security risk management program and needs a Senior Risk Analyst to be a core builder and operator of that function. You will design, implement, and mature a risk framework that spans information security, AI, and operational risk—building toward a program that is quantitative-leaning, connected to live data sources, and actionable at every altitude from service owner to executive leadership. You will establish risk identification and scoring methodologies, own the enterprise risk register, and produce risk intelligence that drives real decisions. You will also support the TPRM function led by a dedicated TPRM lead, contributing to assessments and risk tracking as needed. You approach this with an AI-native mindset: using AI to monitor threat landscapes, analyze risk data, draft risk narratives, and surface emerg

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior Detection Analyst to join our team. This is a remote role (in Costa Rica), reporting to the Manager, Detection Analyst in the Detection Operations Team. You will utilize our detection platform to analyze telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud to publish threats for our Managed Detection and Response customers. Additionally, by leading projects to improve the Detection Operations workflow through orchestration and automation, you will ensure our customers receive high-fidelity threat analysis and concisely written communication regarding emerging threats at scale. What You’ll Do (Role Expectations) Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS Publish and review threats for customers using concisely written communication to effec

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Detection Analyst to join our team. This is a Hybrid (Pune, India) role, reporting to the Manager in the Detection Analysis department. You will utilize our detection platform to analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud to publish threats for our Managed Detection and Response customers. Additionally, you will ensure our customers receive high-fidelity threat analysis and concisely written communication regarding emerging threats at scale. What you’ll do (Role Expectations) Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS Publish threats for customers using concisely written communication to effectively convey key indicators and remediation context Actively engage with the Detection Operations team to challenge the status

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Detection Analyst to join our team. This is a Remote (USA Only) role, reporting to the Detection Analyst Manager in the Detection Operations Team. You will utilize our advanced detection platform to analyze EDR telemetry, alerts, and log sources across key detection domains—including Endpoint, Identity, Network, and Cloud—to identify and publish threats for our Managed Detection and Response customers. By driving projects that improve our workflow through orchestration and automation, you will ensure our customers receive high-fidelity threat analysis and concise, actionable communication regarding emerging threats at scale. What you’ll do (Role Expectations) Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS Publish threats for customers using concisely written communication to effectively convey key indicator

About the Team The Intelligence and Investigations team seeks to rapidly identify and mitigate abuse and strategic risks to ensure a safe online ecosystem. We are dedicated to identifying emerging abuse trends, analyzing risks, and working with our internal and external partners to implement effective mitigation strategies to protect against misuse. Our efforts contribute to OpenAI's overarching goal of developing AI that benefits humanity. The Strategic Intelligence & Analysis (SIA) team provides safety intelligence for OpenAI’s products by monitoring, analyzing, and forecasting real-world abuse, geopolitical risks, and strategic threats. Our work informs safety mitigations, product decisions, and partnerships, ensuring OpenAI’s tools are deployed securely and responsibly across critical sectors. About the Role As an Agentic Risk Analyst, you will shape OpenAI’s operating picture for current agentic risk across products and platforms. You will bring a strategic, system-level perspective to current risks, connecting individual incidents, technical findings, abuse patterns, and external developments to relevant workstreams, mitigations, owners, dependencies, and residual gaps. You will analyze how risks emerge through autonomy, multi-step task execution, tool use, memory, retrieval, connectors, computer-use capabilities, and multi-agent workflows, with a particular focus on both adversarial misuse and unintended system behavior. By synthesizing signals from investigations, evaluations, red teaming, security reviews, product launches, external research, and real-world incidents, you will maintain a current view of material risks and evolving threat patterns. Your work will help turn complex and often ambiguous signals into coordinated decisions and measurable follow-through across product, safety, security, policy, and governance teams. You will work closely with investigators, engineers, product, policy, safety, and security teams, and measurement and forecasting

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Organization overview: Develops and completes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Maintains hardware, software and network firewalls and encryption protocols. Administers security policies to control physical and virtual access to systems. Responsibilities: Conduct proactive and reactive open-source intelligence (OSINT) research to identify publicly exposed personal information about designated Micron employees and executives that is publicly exposed online. Assess the severity of identified exposures and prioritize remediation efforts based on risk, threat likelihood, and business impact. Submit, track, and manage removal, de-indexing, and suppression requests across search engines, data broker sites, people-search platforms, and social media channels. Monitor for the reappearance of previously removed information and perform ongoing digital footprint reviews for high-risk individuals. Partner with Legal, Human Resources, Executive Protection, and Security teams to investigate and raise credible threats, harassment campaigns, and doxxing incidents. Maintain accurate and detailed case documentation, investigation records, and reporting in accordance with privacy laws, company policies, and legal requirements. Develop and enhance r

About the team The OpenAI for Government team is a mission-driven group bringing frontier AI to the U.S. Intelligence Community (IC) and broader national security enterprise. We partner with intelligence professionals to deploy secure, compliant AI capabilities—including ChatGPT Enterprise, ChatGPT Gov, and the OpenAI API—in mission-aligned environments that meet rigorous security, privacy, reliability, and responsible-AI requirements. As part of the OpenAI for Government team, you will work across IC elements and mission partners—including ODNI, CIA, NSA, DIA, NGA, NRO, and other federal intelligence organizations—to help analysts, collectors, operators, and technical teams apply frontier AI to their highest-priority missions. We accelerate adoption through hands-on support, mission-specific workflows, tailored enablement, and measurable operational outcomes while preserving human judgment, analytic integrity, and protection of sensitive information. About the Role The Strategic Delivery Lead (SDL) for the Intelligence Community will identify, shape, and deliver OpenAI’s highest-impact deployments for U.S. intelligence organizations. You will help IC customers translate mission priorities—including all-source analysis, intelligence production, collection management, open-source and geospatial exploitation, cyber threat analysis, knowledge discovery, and analyst productivity—into secure, technically feasible AI deployments built on the OpenAI API and enterprise products. The role is highly cross-functional and customer-facing: you will partner with Research, Engineering, Go-to-Market, Security, Legal, Privacy, and government mission, acquisition, and technical stakeholders to align on scope, remove delivery obstacles, and communicate progress from working teams to agency leadership. You will own end-to-end execution of technical delivery workstreams led by Forward Deployed Engineers, Researchers, Solutions Architects, and Enablement teams. You will establish mission

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Detection Engineer to join our team. This is a Hybrid role, reporting to the Senior Manager in the Threat Hunting department. You will analyze emerging threats, adversarial behaviors, and tactics, techniques, and procedures (TTPs) to understand attacker methodologies and improve detection capabilities across our global ecosystem. This role requires conducting proactive and retroactive threat hunting using Zscaler telemetry while working flexible schedules, including weekend night shifts, to meet global operational demands. What you’ll do (Role Expectations) Pick the handful of numbers that tell you the area is healthy (fidelity, false-positive and false-negative rates, ATT&CK coverage, detector regressions) and do the work to move them in the right direction Take what threat intel, hunts, and the analysts consuming your alerts tell you and turn it into what gets fixed and built next Lead

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior Manager, Communications to join our team. This is a hybrid or remote role, reporting to the VP of Corporate Communications in the Marketing & Communications department. As a primary storyteller for Zscaler, you will scale our corporate narrative by turning customer success stories, ThreatLabz research, and public sector engagements into high-impact market visibility across press, analyst, and digital channels. What you’ll do (Role Expectations) Lead PR strategy and execution for customer stories, partnering with Customer Advocacy, Sales, and Customer Success to build an integrated content calendar Mine internal and third-party data alongside ThreatLabz and research teams to surface compelling threat trends and seasonal narratives Brief creative teams to produce data visualizations, infographics, and interactive content that elevate Zscaler's cybersecurity narrative Pitch data-driv

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Threat Intelligence Engineer, you'll combine deep technical expertise in tracking sophisticated adversaries with innovative AI engineering to protect billions of dollars in digital assets. You'll turn internal and external signals into durable detections and actionable intelligence, partnering across the entire organization to bring insights directly to the stakeholders who make risk-based decisions. What you'll do : Automate the tracking and analysis of sophisticated cyber threats targeting Coinbase's customers, employees, products, and infrastructure Influence decisions across the organization by reporting and presenting intelligence analysis to stakeholders, partners, and executives Model and curate our shared view of the threat landscape within Vertex Synapse, our Threat Intelligence Platform, while elevating analytic quality through critical peer review and strategic feedback Cultivate strategic relationships within Threat Intelligence communities to expand access to information and strengthen our trust network Investigate and deliver on a high volume of intelligence requests by prioritizing, documenting, and reporting timely and accurate information Serve as subject matter expert on the latest cyber

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role: Anthropic sits at the frontier of AI development, which makes us one of the most interesting targets in the world for nation-state and advanced criminal actors. The Threat Intelligence function within our Detection & Response team exists to make sure we see them coming. As a Threat Intelligence Engineer, you'll be a hands-on practitioner responsible for producing the actionable intelligence that drives our detections, hunts, and defensive priorities. You'll track the adversaries most likely to target a frontier AI lab, build the tooling and pipelines that turn raw indicators into operational defenses, and work shoulder-to-shoulder with detection engineers and incident responders to make sure intelligence actually changes outcomes. This is a builder's role on a small, high-leverage team — you'll have broad latitude to shape how threat intelligence is collected, analyzed, and operationalized at Anthropic. Responsibilities: Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the broader technology sector — producing timely, actionable intelligence for Security Engineering stakeholders Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise into our detection and alerting stack Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, and turn findings into durable detections Perform technical analysis of malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals Partner with Detectio

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. The security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We’re looking for a detail-oriented, collaborative Security Operations Engineer to join our Security blue team in Warsaw to help solve complex tracking challenges and ultimately scale our security infrastructure. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve: Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil. Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats. Conduct forensic analysis during security incidents to understand the scope and impact of incidents. Collaborating with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations. Develop and deliver t

The Team: As a Security Engineer 2 on the Cyber Threat Intelligence team, you will help Datadog stay ahead of evolving threats by identifying, analyzing, and operationalizing intelligence on threat actors, campaigns, and emerging threats. Working within Security Engineering, you will partner closely with security teams to translate intelligence into actionable security improvements across the company. You will serve as a subject matter expert on how the cyber threat landscape intersects with Datadog and contribute to intelligence-led decision making during both steady-state operations and active security incidents. This role provides opportunities to influence detection, response, and security strategy through technical analysis, collaboration, and intelligence-driven initiatives. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Develop and maintain tooling that automates the collection, processing, analysis, and dissemination of threat intelligence. Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog. Conduct threat hunting and infrastructure analysis to identify adversary activity relevant to Datadog and improve defensive controls. Partner with security teams to operationalize intelligence into detections, investigations, and response workflows. Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence. Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders. Who You Are: Experienced in writing and presenting operational and technical intelligence for threat detection, response, and security stakeholders. Skilled in partnering with detection and response te

Do work that matters. At AlertMedia, we're the leading Risk Intelligence and Response company helping organizations protect their people and businesses. Our mission is simple but critical: to save lives and minimize loss by identifying emerging threats worldwide and enabling timely communication when emergencies impact personal safety or business continuity. Everything we do is guided by our core values: We’re humans not robots Customers always come first We work better together Simplicity is our strength Our reputation is priceless Hard work pays off AlertMedia is seeking a Strategic Intelligence Analyst ( Shift: Tues-Sat, 9am-5pm CT) to join our Global Intelligence team. This role will focus primarily on the Americas region, including the United States, Canada, Mexico, Central America, South America, and the Caribbean. This role will play a critical part in helping customers understand and prepare for events and emerging risks that may impact their people, operations, and business continuity. As a Strategic Intelligence Analyst, you will leverage open-source intelligence, analytical tradecraft, and a variety of intelligence sources to identify, assess, and communicate risks associated with future events, geopolitical developments, evolving global trends, and activist movements. A primary focus of this role will be monitoring and assessing planned and emerging events across the Americas, including demonstrations, protests, labor actions, counter-protests, political rallies, major public gatherings, and other activity that may create operational, travel, safety, or reputational impacts for organizations. Additionally, you will serve as a regional intelligence resource for the Americas, monitoring the region for significant developments; elections and transition periods; political activity; organized crime and cartel-related security trends; border, migration, and transport issues; and emerging trends that may affect customers and their employees. In addi

The Challenge As the Senior Manager of the Cyber Threat Research & Intelligence team, you will guide Adobe's efforts to predict, identify, and respond to the changing threat environment. Your position is key to delivering high-quality intelligence at tactical, operational, and strategic levels. This intelligence helps Adobe's security teams and executive leaders make informed, proactive decisions. You will develop and enhance a leading threat research and intelligence program that transforms raw threat data into actionable insights. This program supports defenses based on adversary behavior and keeps Adobe ahead of advanced threat actors. This is an opportunity to lead with purpose, build Adobe's intelligence strategy, and make a measurable impact on how the organization understands and responds to important threats. What You Will Do Develop and take responsibility for the strategic vision of Adobe's Cyber Threat Research & Intelligence program, covering tactical, operational, and strategic intelligence pillars. Lead a senior team of threat intelligence researchers, balancing deep technical research with timely intelligence production and collaborator engagement. Coordinate the full intelligence lifecycle — from collection and processing to analysis, production, and dissemination — ensuring intelligence outputs are relevant, accurate, timely, and actionable. Build and manage Adobe's threat actor tracking program, maintaining profiles on advanced persistent threat (APT) groups, cyber criminal organizations, and hacktivists relevant to Adobe's industry and attack surface. Produce and deliver intelligence products at multiple levels: tactical reports (IOCs, TTPs, YARA/Sigma rules), operational assessments (campaign analysis, actor attribution), and strategic briefings (threat landscape, industry trends, geopolitical risk). Partner closely wit