Security Threat Intelligence Analyst Jobs

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Research Group (ARG) handles proactive threat hunting and adversary behavior analysis across Stripe products. Rather than reacting to alerts, the team maps end-to-end fraud and abuse paths, validates novel attack vectors, and identifies product conditions that enable fraud. Using agentic automated testing and simulation tools, ARG translates research into actionable threat advisories, strategic control recommendations, and regression scenarios to systematically eliminate vulnerabilities. What you’ll do As an Abuse Research Engineer in the Abuse Research Group, you will play a critical role in safeguarding Stripe’s financial ecosystem by proactively hunting for advanced threats, dissecting complex fraud vectors, and extracting actionable adversary intelligence. Rather than relying solely on reactive alerts, you will develop and execute hypothesis-driven threat hunting operations across internal telemetry and external sources to uncover fraudulent tools, tactics, and techniques (TTPs) before they impact Stripe’s platform. Central to this work is FT3 (Fraud Taxonomy 3.0), Stripe’s multi-layered taxonomy that decomposes monolithic fraud into structured kill chains. Collaborating cross-functionally with Fraud Ops, Strategy, Risk, Onboarding, and Security, you will integrate threat intelligence, build agentic simulation workflows, and systematically eliminate product vulnerabilities. Responsibilities Proactive Threat Hunting &amp

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Onchain Investigator, you'll own end-to-end onchain investigations into the threat actors targeting Coinbase and the crypto ecosystem. You'll cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products. This role leads investigation methodology for the team, not just individual cases. What you'll do: Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and overall security posture Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation to launch Lead new investigative techniques, teach them across Sec

About the Team At DoorDash, including international brands Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Global Cyber Defense is a highly talented and globally distributed team that covers response, intelligence, insider risk, threat hunting, automation, and detection engineering. We exist to keep our brands safe for the Dashers, merchants, and consumers who depend on us. Our mission is to detect, investigate, and respond to cyber threats with speed and precision, while continuously hardening our defenses through automation, AI, and cross-regional collaboration. About the Role The senior detection engineer is part of the larger detection engineering team that creates, tunes, maintains, and improves the detection lifecycle. This hands-on role is at the forefront of agentic detection engineering of a rapidly maturing security function. You’ll work closely with our data pipelines team, incident response, insider risk, and threat intelligence teams to make the most effective detection content to detect threats as quickly as possible. Detection at DoorDash spans more than the corporate estate. You’ll build coverage across cloud infrastructure, corporate endpoints and identity, and the marketplace itself - where consumer, merchant, and Dasher platforms create abuse and insider-risk patterns you won’t find in a typical enterprise SOC. We’re actively consolidating detection onto a modern data platform, so you’ll have real influence over what the pipeline looks like. This role reports to the Senior Manager, Cyber Defense located in the United States and participation in an on-call rotation is required for this role. You’re excited about this opportunity because you will… Conduct hands-on detection engineering for custom alerting, to include implementing risk-based analytics to reduce alert volumes and promote high-fidelity alert

Job Description Vise is looking for a curious, driven, and tech-savvy Technology Operations Lead to join our growing team. This is a dynamic, cross-functional role that blends IT support, cybersecurity awareness, facilities coordination, and project planning — all with a forward-looking focus on artificial intelligence and emerging technology. If you're someone who gets excited about new tools, loves solving problems, and wants to grow alongside a team that's embracing the future of work, we want to hear from you. This role is onsite in NYC, in our SoHo office. What you bring on day one: 2-4 years of experience in a relevant role such as IT Support Specialist, cybersecurity, SOC Analyst, Systems Administrator, or similar Foundational knowledge of networking, hardware, and operating systems Basic understanding of cybersecurity principles and best practices Strong communication skills and a collaborative, team-first attitude Experience with or strong interest in AI tools (e.g., ChatGPT, Copilot, automation platforms) Exposure to project coordination or ticketing systems (e.g., Jira, ServiceNow, Asana) Familiarity with cloud platforms (AWS, Azure, or Google Cloud) What you will own: IT & Technical Support Provide day-to-day technical support for hardware, software, and network infrastructure Maintain and troubleshoot workstations, peripherals, and office technology systems Manage user accounts, access controls, and software licensing Cybersecurity Assist in monitoring systems for potential security threats or vulnerabilities Support compliance efforts and help enforce security policies and best practices Participate in security awareness initiatives across the organization Facilities & Technology Infrastructure Support office builds, moves, or expansions from a technology perspective Manage hardware inventory and asset lifecycle Maintain hardware infrastructure in meeting rooms and office AI & Emerging Technology Stay current on AI tools, automa

P-57 At Databricks, we are obsessed with enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best Data Intelligence Platform, so our customers can focus on the high value challenges that are central to their own missions. Founded in 2013 by the original creators of Apache Spark, Databricks has grown from a tiny corner office in Berkeley, California to a global organization with over 1000 employees. Thousands of organizations, from small to Fortune 100, trust Databricks with their mission-critical workloads, making us one of the fastest growing SaaS companies in the world. Our engineering teams build highly technical products that fulfill real, important needs in the world. We constantly push the boundaries of data and AI technology, while simultaneously operating with the resilience, security and scale that is critical to making customers successful on our platform. We develop and operate one of the largest scale software platforms. The fleet consists of millions of virtual machines, generating terabytes of logs and processing exabytes of data per day. At our scale, we regularly observe cloud hardware, network, and operating system faults, and our software must gracefully shield our customers from any of the above. As a Data Scientist on the Data Team, you will help build a data-driven culture within Databricks by helping solve product and business challenges. The Data team also functions as an in-house, production "customer" that dogfoods Databricks and drives the future direction of the products. The impact you will have: Shape the direction of some of our key data science areas - segmentation, recommendation systems, forecasting, product analytics, churn prediction and insights. Work closely with Engineering, Product Management, Sales and Customer Success to understand product usage patterns and trends and make data-driven decisions, recommendations a

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Hardware Design Engineer to lead the end-to-end development of next-generation network security appliances. This individual will be responsible for all phases of hardware product development, including requirements definition, architecture, detailed design, prototyping, validation, manufacturing support, and production release. The ideal candidate will have extensive experience designing high-performance networking platforms, embedded systems, and security-focused hardware products. Key Responsibilities Hardware Architecture & Product Development Own the complete hardware design lifecycle from concept through production and sustaining engineering. Translate product requirements into hardware architectures and detailed design specifications. Conduct technology evaluations, design trade-off analyses, and recommend optimal solutions. Select and qualify key components, technologies, and vendors. Drive product lifecycle management (PLM) activities, including product introduction, production release, field support, and post-launch analysis. Design & Development Design complex multi-layer PCBs for networking and security appliances. Perform circuit design, schematic capture, signal integ

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional engineering role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform ; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and our core engineering teams, turning yo

Summary: The Senior SecOps Engineer at Showpad will play a crucial role within the Security Operations team, collaborating with various departments, including Engineering, Product, and other business units. This position focuses on identifying, managing, and mitigating cybersecurity risks, particularly in cloud-native environments, to enhance security capabilities. The ideal candidate will possess solid experience in SecOps practices and a deep understanding of modern security methodologies. Responsibilities: Manage cybersecurity operations, including tasks related to application, hardware, and cloud infrastructure security. Act as the key cybersecurity contact for internal teams regarding daily practices, company-wide initiatives, and the Showpad product. Ensure development teams adopt and implement best practices in software security development. Enable development teams by providing CI/CD processes that integrate security and quality tooling. Manage and improve our CNAPP solution. Oversee and manage cybersecurity operations, ensuring continuous monitoring and protection of cloud infrastructure and applications. Manage and respond to events related to vulnerability programs, endpoint protection, user behavior analytics, firewalls, IDS/IPS, and external threat intelligence. Collaborate with internal teams to ensure security best practices and policies are adhered to across the organization. Develop and maintain security controls and automation strategies within CI/CD pipelines. Monitor and assess risks, manage vulnerabilities, and implement appropriate security measures. Required Skills: Proven experience in information security, with a background in security operations, application security, or related roles. Skilled in identifying, analyzing, and handling phishing attempts and other social engineering threats. Strong knowledge of modern web application security practices and frameworks. In-depth understanding of the Secure Software Development Life Cycle (

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . As a member of the Installed Base team, you will be responsible for helping drive Security Solution sales through our Channel Partners to existing SonicWall customers. Among other responsibilities, position objectives entail: lifecycle management, subscription attachment, solution cross-selling, weekly forecasting, data analysis, development and execution of sales plays, and sales collaboration across multiple teams. Installed Base Roles and Responsibilities: Serve as the primary point of contact for all Installed Base sales inquiries, including training and enablement on LifeCycle 360° Installed Base Management tools Conduct outbound communications (phone and email) with existing customers and channel partners to support renewals and Installed Base initiatives (Renew, Cultivate, Refresh, Retain) Provide consultative business solutions aligned with customer needs and SonicWall’s objectives, including live web-based solution presentations Leverage product subscription data and reporting to increase the number of active subscribers within the Installed Base Strengthen customer relationships by demonstrating deep knowledge of SonicWall products, services, and technology, while utilizing cross-functiona

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional sales engineering or software development role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform ; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and o

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional sales engineering or software development role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform ; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and o

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Principal Software Engineer to lead the architecture, development, and evolution of a large-scale malware analysis and cybersecurity platform. This role will own the end-to-end technical architecture across Python-based analysis pipelines, message-driven job orchestration systems, Windows VM sandbox environments, and web-based interfaces. The ideal candidate brings deep expertise in software engineering, malware analysis, and distributed systems, with a proven ability to take ownership of complex legacy platforms and drive modernization initiatives. You will lead the design and implementation of advanced detection capabilities, including behavioral analysis, malware sandboxing, machine learning-based classification, and support for new file types, while ensuring platform scalability, reliability, and performance. This position requires strong hands-on development skills in Python with Linux-based production environments, messaging architectures such as RabbitMQ, virtualization technologies, and cloud-native deployment practices. As the technical leader for the platform, you will establish engineering standards, guide architectural decisions, reduce technical debt, mentor senior engi

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Job Title: Distinguished Engineer - Data Architect Role Overview: We are looking for a Distinguished Engineer- Data Architect to design and build the data foundation for our AI-driven security platform. In this role, you will own the architectural blueprint and core implementation of our data strategy, transforming massive streams of high-velocity network traffic logs, customer configurations, and security alerts into high-performance, ML-ready data fabrics. As part of a lean, elite three-person Data & AI team, you will serve as the ultimate technical authority on data scale, streaming architecture, multi-tenant security, and cost-efficient storage systems. Key Responsibilities: Architect the Core Data Platform: Design, implement, and evolve a unified blueprint for streaming and batch data processing capable of ingesting, normalizing, and storing petabyte-scale, high-velocity security telemetry. Enable AI & Advanced Analytics: Partner directly with the Lead AI Engineer to architect the underlying storage, retrieval systems, and feature stores—including optimal vector database structures and data lakehouse layers—required for low-latency AI inference and training. Enforce Zero-Trust Data Governance: Architect s

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional engineering role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and our core engineering teams, turning you

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Role Overview SonicWall is seeking a Distinguished Engineer to define and drive the long-term technical vision, architecture, and evolution of its Secure Private Access (SPA) platform and Zero Trust access technologies. This role serves as the highest level of individual contributor leadership, influencing architecture, engineering strategy, and innovation across multiple product and engineering organizations. The role builds upon SonicWall's current cloud-native SSE, ZTNA, and secure access initiatives. Key Responsibilities Define and drive the long-term technical vision and architecture strategy for SonicWall's Secure Private Access (SPA) platform and Zero Trust access technologies. Lead the design and evolution of highly scalable, secure, resilient, cloud-native distributed systems. Influence technical direction, architectural decisions, and engineering standards across multiple product and engineering organizations. Provide technical leadership during critical production incidents, customer escalations, and security events, driving root cause analysis and long-term architectural improvements. Serve as a trusted technical advisor to engineering and executive leadership. Mentor Principal Engineers and cultivate tech