Security Threat Intelligence Analyst Jobs

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Responsibilities Lead development and optimization of a key dataplane module for SonicWall NGFW platforms. Design, implement, and enhance high‑performance packet‑processing paths using DPDK/ODP/OFP or similar frameworks. Diagnose and resolve complex performance, throughput, and latency issues in the dataplane. Collaborate with platform, networking, security, and QA teams to deliver features and product improvements. Prototype and evaluate new dataplane technologies, contributing to next‑gen NGFW capabilities. Influence architectural decisions, scalability strategies, and long‑term technical direction for dataplane components. Requirements 10+ years of experience in C/C++ systems‑level development for networking or embedded platforms. Strong hands‑on expertise in DPDK, ODP, OFP , or similar high‑performance packet‑processing frameworks. Solid understanding of L3/L4 networking protocols , including IPv4/IPv6, routing, NAT, VPN/IPsec/SSL, and related protocols. Proven ability to build multi‑threaded, low‑latency, high‑throughput systems. Strong knowledge of OS internals, memory and concurrency models, and network stack behaviour. Excellent debugging, performance tuning, and system analysis s

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Japan - Hybrid role As a member of the Installed Base team, you will be responsible for helping drive Security Solution sales through our Channel Partners to existing SonicWall customers. Among other responsibilities, position objectives entail: lifecycle management, subscription attachment, solution cross-selling, weekly forecasting, data analysis, development and execution of sales plays, and sales collaboration across multiple teams. Installed Base Roles and Responsibilities: Serve as the primary point of contact for all Installed Base sales inquiries, including training and enablement on LifeCycle 360° Installed Base Management tools Conduct outbound communications (phone and email) with existing customers and channel partners to support renewals and Installed Base initiatives (Renew, Cultivate, Refresh, Retain) Provide consultative business solutions aligned with customer needs and SonicWall’s objectives, including live web-based solution presentations Leverage product subscription data and reporting to increase the number of active subscribers within the Installed Base Strengthen customer relationships by demonstrating deep knowledge of SonicWall products, services, and technology, while utili

About Hexnode Hexnode is a global leader in Unified Endpoint Management (UEM), trusted in over 100 countries and managing millions of devices worldwide. With continuous innovation across Apple, Windows, Android, macOS, Linux, and tvOS ecosystems, Hexnode is redefining enterprise mobility and cybersecurity. As we expand our Extended Detection and Response (XDR) capabilities, we are building a next-generation data platform designed for massive scale, real-time intelligence, and high-performance security analytics. The Role We are looking for a Senior Data Platform Engineer to architect, scale, and optimize the core data infrastructure powering our XDR product. In this role, you will take ownership of the strategic evolution of our data layer — ensuring seamless ingestion, storage, indexing, search, and retrieval of high-volume security telemetry and device data. You will play a key role in transforming our platform into a highly scalable, cost-efficient, secure, and analytics-ready ecosystem that supports real-time detection, investigation, and advanced data science workflows. This is a high-impact individual contributor role focused on architecture, platform modernization, and long-term scalability. Key Responsibilities Architect and evolve the data layer to support high-throughput ingestion, real-time processing, and low-latency search across massive datasets. Evaluate existing search and storage platforms and drive modernization initiatives toward more scalable, performant, and cost-effective solutions. Design and implement optimized indexing, partitioning, and data structuring strategies for efficient querying and retrieval. Build and manage scalable data lake architectures that support advanced analytics, threat intelligence, and data science workflows. Define strategies for lifecycle management, retention, tiered storage, and cost optimization across the data platform. Ensure high availability, fault tolerance, and disaster recovery across distributed systems. I

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Software Dev Principal Engineer - Cloud-Native Microservices & Network Security About the Role SonicWall is a global leader in cybersecurity, offering firewalls, secure access solutions, and threat intelligence that protect millions of networks for enterprises, governments, and service providers worldwide. SonicWall’s portfolio includes next-generation firewalls (NGFW), centralized management, wireless network management, secure mobile access, cloud security, and endpoint security. All these solutions are coordinated and managed through SonicWall's Unified Management (UM) architecture. We invite you to join our team in developing innovative network security management solutions for SonicWall's Network Security Manager (NSM), a centralized management and analytics platform within the SonicWall Unified Management (UM) ecosystem. In this role, you will help build secure and scalable software capabilities that integrate with SonicWall's Unified Management (UM) platform and Shared Services Platform (SSP) to meet the unique operational needs of enterprise customers, Managed Service Providers (MSPs), and Mana

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . About the Role SonicWall is a global leader in cybersecurity, offering firewalls, secure access solutions, and threat intelligence that protect millions of networks for enterprises, governments, and service providers worldwide. SonicWall’s portfolio includes next-generation firewalls (NGFW), centralized management, wireless network management, secure mobile access, cloud security, and endpoint security. All these solutions are coordinated and managed through SonicWall's Unified Management (UM) architecture. We invite you to join our team in developing innovative network security management solutions for SonicWall's Network Security Manager (NSM), a centralized management and analytics platform within the SonicWall Unified Management (UM) ecosystem. In this role, you will help build secure and scalable software capabilities that integrate with SonicWall's Unified Management (UM) platform and Shared Services Platform (SSP) to meet the unique operational needs of enterprise customers, Managed Service Providers (MSPs), and Managed Security Service Providers (MSSPs) around the globe. You will design and build c

Skeletons, lasers, tattoo buses — the Torq brand grabs attention like nothing else in cybersecurity. And we're growing like crazy, backed by Series D funding, 200% employee growth, and 300% revenue growth. Fueling Torq's momentum is our game-changing AI SOC platform, backed by a team and culture that makes Torq one of Forbes' Best Startup Employers in America, and a Business Insider 'startup to bet your career on'. Life at Torq is all gas, no brakes. We're a team of relentless, collaborative go-getters pushing the boundaries of what's possible for security automation. Every role is an essential driver of Torq's success as the AI-native autonomous SecOps platform of choice for security teams across the Fortune 500. About the Role We are looking for an AI-savvy Product Manager to join Torq as we continue expanding and exploring the hottest intersection in the security market: agentic AI and SecOps. The ideal candidate will have both experience in at least one SOC-adjacent domain (threat intelligence, SecOps, hunting, incident response…) and strong understanding of agentic AI. You’ll own parts of Torq’s agentic platform: where agents are managed, how they interact with users, and how they can help SOCs to reduce system-critical metrics and overall threat exposure. What You’ll Be Doing Lead critical parts of Torq’s agentic platform to help drive forward adoption and innovation across the full lifecycle - from UX to prompt engineering Become an expert in Torq’s AI SOC offering and in Torq’s Platform as a whole Represent the customer’s voice inside Torq to ensure we’re staying on the critical path Work closely with Torq’s top-notch engineering teams to deliver product capabilities and stay on top of state-of-the-art AI trends Analyze product data - from classic product analytics to AI evaluations of usage patterns - to proactively bubble up user needs or issues The Ideal Candidate Has 3-5 years of product management experience Possesses a strong understanding

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Data Scientist Overview: Services within Mastercard is responsible for acquiring, engaging, and retaining customers by managing fraud and risk, enhancing cybersecurity, and improving the digital payments experience. We provide value-added services and leverage expertise, data-driven insights, and execution. Role: We are seeking a highly skilled and motivated Lead Data Scientist to join our Cyber Analytics team within the Security Solutions Data Science organization. The successful candidate will play a leadership role in developing advanced analytics and machine learning solutions across cybersecurity, payments, and fraud. This person will also have formal people-management responsibilities for junior team members, helping them grow their technical capabilities, manage priorities, and deliver high-quality work. Job Responsibilities: • Lead the design, development, validation, and implementation of advanced analytical solutions, predictive models, and machine learning algorithms using large-scale payment, fraud, merchant, cybersecurity, and threat-intelligence data. • Provide technical leadership for graph analytics and modeling, including graph schema design, relationship modeling, community detection, link analysis, graph embeddings, and graph neural networks – all in service of

About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the products they build. By combining powerful analytics with AI that knows your business, Mixpanel helps teams see what’s working, diagnose what’s not, and decide what to build next. Learn more at mixpanel.com . About the Information Security Team We believe security isn't just a function—it's a platform for bold ideas. The Information Security Team at Mixpanel is a small, high-impact group committed to building a frictionless security program that serves as a model for our company and the broader industry. This is a team for those who are never satisfied, who dream big, and who have the resilience to see those ideas through. We operate at the intersection of business strategy and technical execution, where we are critical partners to every team at Mixpanel. Our work requires a broad, generalist skill set across vulnerability management, threat detection, and access management. We strategically balance necessary compliance work with proactive initiatives, with a constant focus on automation as the path to a more efficient security program. We use our expertise in a variety of well-known security platforms and tools to create seamless, automated processes that empower our peers. We are a lean team by design, and we succeed or fail together, committed to transparent communication and a strong sense of ownership. Responsibilities Domain Ownership: Serve as the domain expert for Detection & Response, integrating telemetry from across our entire ecosystem—including Product, Cloud, Corporate Infrastructure, and Identity—to build a unified, high-fidelity detection and response engine. Technical Project Execution: Translate high-level project requirements and technical scoping documents into actionable milestones, managing task delivery and driving cross-functional results. Architect Modern Detection: Design and imp

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Senior Manager, Security Operations Center Location: Remote Australia Compensation Range: $110,000 to $140,000 AUD base plus bonus and equity What You’ll Do: You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion. You give a $ht about protecting customers and improving how the team operates, taking ownership of investigations and acting on the information available. You bring Warrior Spirit to complex incidents, staying resilient and composed under pressure. You are Outcome-Obsessed, measuring your work by the threats contained, customers

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote, US (West Coast) Compensation Range: $100,000-$125,000 base plus bonus and equity. This role may be eligible for on-call/call-in pay in addition to base pay *The initial training period for this position will be Monday-Friday. Following training, the work schedule is subject to change and may include weekend or a 4x10 shift, depending on business requirements* What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyberattacks and will have daily opportunities to progress your analyst skillset and accelerate yo

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Role Overview We are looking for a Security Analyst to join the Bloomreach GIST (Global Information Security & Technology) team to help protect our environment from threats, vulnerabilities, and sophisticated attackers. Your work will have a significant impact on numerous customers across various e-commerce verticals and hundreds of millions of online users. As a core member of our globally distributed 24/7 Security Operations Team, you are expected to work from one of our India offices ( Bengaluru) or from home. This role is ideal for someone who has built a solid foundation in security operations and is ready to take the next step — owning more complex work, developing specialised skills, and contributing more meaningfully to the team's detection and response mission Your job will include, but

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 160+ public exchanges globally and thousands of private exchanges at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior SOC Analyst to join our team . This is a remote role, reporting to the Global SOC Manager in the Enterprise Security department . As a key guardian of our infrastructure, you will monitor, detect, and analyze security incidents to protect our digital assets . You will be the first line of defense, ensuring that potential threats are mitigated promptly and effectively to maintain a secure environment . What you’ll do (Role Expectations) Monitor security alerts and events to identify potential threats and vulnerabilities Detect and analyze security incidents using multiple security tools Respond to security incidents promptly, following established procedures and protocols Conduct in-depth analysis of security events to determine the scope and impact of potential threats Perform phishing incident analysis Who You Are (Success Profile) You thrive in ambiguity. You're comfortable building the

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We’re looking for a Principal Product Manager to guide the vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security. Attackers not only break in - they log in. Identity is now a major target for attacks. These attacks can happen in on-premises setups, cloud environments, or with self-directed agents. Detecting and responding to identity-based attacks is essential for any modern Security Operations Center (SOC). In this high-impact role, you will define how Elastic detects, investigates, and responds to identity-based threats, building on our Entity Analytics and Entity Store foundation to deliver a credible, differentiated ITDR function. You will also own the roadmap for securing non-human and AI agent identities within Elastic Security, one of the fastest-growing and least-governed attack surfaces in the enterprise. You will work at the intersection of identity, detection engineering, and AI, partnering with threat researchers, data scientists, and engineers, and evangelizing our approach to a global community of security practitioners. What You Will Be Doing Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving our Entity Analytics and Entity Store foundation from behavioral analytics into an identity-defense outcome. Mana

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We’re looking for a Principal Product Manager to guide the vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security. Attackers not only break in - they log in. Identity is now a major target for attacks. These attacks can happen in on-premises setups, cloud environments, or with self-directed agents. Detecting and responding to identity-based attacks is essential for any modern Security Operations Center (SOC). In this high-impact role, you will define how Elastic detects, investigates, and responds to identity-based threats, building on our Entity Analytics and Entity Store foundation to deliver a credible, differentiated ITDR function. You will also own the roadmap for securing non-human and AI agent identities within Elastic Security, one of the fastest-growing and least-governed attack surfaces in the enterprise. You will work at the intersection of identity, detection engineering, and AI, partnering with threat researchers, data scientists, and engineers, and evangelizing our approach to a global community of security practitioners. What You Will Be Doing Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving our Entity Analytics and Entity Store foundation from behavioral analytics into an identity-defense outcome. Mana

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We’re looking for a Principal Product Manager to guide the vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security. Attackers not only break in - they log in. Identity is now a major target for attacks. These attacks can happen in on-premises setups, cloud environments, or with self-directed agents. Detecting and responding to identity-based attacks is essential for any modern Security Operations Center (SOC). In this high-impact role, you will define how Elastic detects, investigates, and responds to identity-based threats, building on our Entity Analytics and Entity Store foundation to deliver a credible, differentiated ITDR function. You will also own the roadmap for securing non-human and AI agent identities within Elastic Security, one of the fastest-growing and least-governed attack surfaces in the enterprise. You will work at the intersection of identity, detection engineering, and AI, partnering with threat researchers, data scientists, and engineers, and evangelizing our approach to a global community of security practitioners. What You Will Be Doing Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving our Entity Analytics and Entity Store foundation from behavioral analytics into an identity-defense outcome. Mana