Threat And Analytics Lead Jobs

About us GoCardless, a Mollie company, is a global leader in bank payments. Over 100,000 businesses, from start-ups to household names, use GoCardless to collect, manage and send bank payments through Direct Debit, real-time payments and open banking. With US$130bn+ processed annually across 30+ countries, we handle recurring and one-off payments without the chasing, stress, or expensive fees. Our end-to-end payment platform also features AI-powered solutions to improve payment success and reduce fraud, alongside connections to over 350 platforms businesses use everyday. We are headquartered in the UK, with teams and operations spanning North America, Europe and Asia-Pacific. For more information, please visit www.gocardless.com and follow us on LinkedIn @GoCardless. Mollie is the leading payments and financial services partner for business, rooted in Europe, with global reach. The role The Threat & Analytics Lead builds GoCardless's data-driven understanding of fraud and financial crime risk. You'll bring specialist analytical expertise to both domains, helping the business understand emerging threats, measure how well existing controls are working, and identify where prevention and detection need to get stronger. Your evidence and insights will inform our strategy and how we prioritise our investments. You'll work closely with Product, Engineering, Operations and Data Science to analyse large, complex datasets and surface patterns, trends and risk concentrations across the customer lifecycle, spanning fraud prevention, transaction monitoring, sanctions screening, customer risk management and broader financial crime work. You’ll work hand-in-hand with the teams who own fraud and financial crime strategy, governance, policy and operational delivery. The Threat & Analytics Lead is a senior-level role with a high level of complexity, autonomy and expectation of impact. What excites you Getting to the root cause of problems — not just r

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role Verkada’s Marketing Analytics and Data Science team is looking for a strategic analytics leader to play an integral role in leveraging our data and technology to help our marketing team run better, faster, and smarter. This role operates like an internal strategy consultant, using data to diagnose performance, uncover growth opportunities, evaluate ROI, and turn ambiguous business questions into clear recommendations. Our team works AI-first, using tools like Claude Code alongside SQL, dbt, and Looker to accelerate analysis, automate workflows, and build internal tools. This role reports to our Senior Manager of Data Science and Analytics. We are committed to a thriving in-office culture. This role requires that you be on-site at our HQ in San Mateo 5 days a week. What You'll Do Analyze campaign, channel, segment, and funnel p

Role Summary We are seeking an experienced SOC / Security Operations Lead to oversee and strengthen the organization's Security Operations Center (SOC), threat detection, incident response, vulnerability management, data protection, and security monitoring capabilities. The ideal candidate will possess extensive experience in managing enterprise security operations, SIEM/SOAR platforms, threat hunting, incident response, DLP, endpoint security, and vulnerability management programs. The role requires leadership of a multi-functional security operations team responsible for protecting critical business systems, customer data, and digital assets while ensuring compliance with RBI regulations and industry security standards. Key Responsibilities Security Operations Center (SOC) Management -Lead and manage 24x7 Security Operations Center (SOC) functions. -Establish and enhance SOC processes, playbooks, escalation procedures, and operational metrics. -Ensure timely detection, triage, investigation, containment, and remediation of security incidents. -Develop SOC maturity roadmaps aligned with industry best practices and regulatory expectations. -Monitor security KPIs, SLAs, MTTR, MTTD, and incident response effectiveness. SIEM, XSIAM & Threat Detection -Lead implementation, administration, and optimization of: -Palo Alto Cortex XSIAM -SIEM Platforms -SOAR Platforms -UEBA Solutions -Threat Intelligence Platforms -Develop and tune correlation rules, detection logic, and analytics use cases. -Enhance detection coverage across cloud, endpoints, applications, networks, and third-party environments. -Drive threat hunting and proactive security monitoring initiatives. Incident Response & Threat Management -Lead enterprise cyber incident response activities. -Develop and maintain incident response plans, runbooks, and communication procedures. -Coordinate investigations involving malware, ransomware, phishing, insider threats, account compromise, fraud, and adv

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Software Dev Principal Engineer - Cloud-Native Microservices & Network Security About the Role SonicWall is a global leader in cybersecurity, offering firewalls, secure access solutions, and threat intelligence that protect millions of networks for enterprises, governments, and service providers worldwide. SonicWall’s portfolio includes next-generation firewalls (NGFW), centralized management, wireless network management, secure mobile access, cloud security, and endpoint security. All these solutions are coordinated and managed through SonicWall's Unified Management (UM) architecture. We invite you to join our team in developing innovative network security management solutions for SonicWall's Network Security Manager (NSM), a centralized management and analytics platform within the SonicWall Unified Management (UM) ecosystem. In this role, you will help build secure and scalable software capabilities that integrate with SonicWall's Unified Management (UM) platform and Shared Services Platform (SSP) to meet the unique operational needs of enterprise customers, Managed Service Providers (MSPs), and Mana

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . About the Role SonicWall is a global leader in cybersecurity, offering firewalls, secure access solutions, and threat intelligence that protect millions of networks for enterprises, governments, and service providers worldwide. SonicWall’s portfolio includes next-generation firewalls (NGFW), centralized management, wireless network management, secure mobile access, cloud security, and endpoint security. All these solutions are coordinated and managed through SonicWall's Unified Management (UM) architecture. We invite you to join our team in developing innovative network security management solutions for SonicWall's Network Security Manager (NSM), a centralized management and analytics platform within the SonicWall Unified Management (UM) ecosystem. In this role, you will help build secure and scalable software capabilities that integrate with SonicWall's Unified Management (UM) platform and Shared Services Platform (SSP) to meet the unique operational needs of enterprise customers, Managed Service Providers (MSPs), and Managed Security Service Providers (MSSPs) around the globe. You will design and build c

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Senior Investigator in Coinbase’s Financial Intelligence Unit within Compliance (2LoD), you’ll help drive Coinbase’s financial crime investigations capability across multiple jurisdictions. This team leads complex reactive and proactive investigations, develops intelligence on emerging typologies and risk patterns, and translates investigative insights into high-quality SAR/STR decisions, escalations and programme improvements. You’ll work on high-impact matters across Coinbase’s global platform, partnering closely with MLROs, local compliance teams, operations teams and cross functional stakeholders to protect Coinbase and its customers from financial crime. What you’ll do: Own end-to-end investigations into complex AML/CFT matters, from alert review or referral, through case development, disposition and SAR/STR submission to relevant FIUs. Conduct delegated MLRO reviews of Suspicious Transaction Reports and Suspicious Activity Reports prior to filing, ensuring accuracy, quality and regulatory defensibility. Lead proactive investigations, using transaction data, on-chain activity, trading behaviour and cross functional intelligence and OSINT to identify emerging typologies, threat patterns and high-risk activity. Develop actionable intelligence from casework and analytics to inform escalations, regulatory reporting, control enhancements and im

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Data Scientist Overview: Services within Mastercard is responsible for acquiring, engaging, and retaining customers by managing fraud and risk, enhancing cybersecurity, and improving the digital payments experience. We provide value-added services and leverage expertise, data-driven insights, and execution. Role: We are seeking a highly skilled and motivated Lead Data Scientist to join our Cyber Analytics team within the Security Solutions Data Science organization. The successful candidate will play a leadership role in developing advanced analytics and machine learning solutions across cybersecurity, payments, and fraud. This person will also have formal people-management responsibilities for junior team members, helping them grow their technical capabilities, manage priorities, and deliver high-quality work. Job Responsibilities: • Lead the design, development, validation, and implementation of advanced analytical solutions, predictive models, and machine learning algorithms using large-scale payment, fraud, merchant, cybersecurity, and threat-intelligence data. • Provide technical leadership for graph analytics and modeling, including graph schema design, relationship modeling, community detection, link analysis, graph embeddings, and graph neural networks – all in service of

About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the products they build. By combining powerful analytics with AI that knows your business, Mixpanel helps teams see what’s working, diagnose what’s not, and decide what to build next. Learn more at mixpanel.com . About the Information Security Team We believe security isn't just a function—it's a platform for bold ideas. The Information Security Team at Mixpanel is a small, high-impact group committed to building a frictionless security program that serves as a model for our company and the broader industry. This is a team for those who are never satisfied, who dream big, and who have the resilience to see those ideas through. We operate at the intersection of business strategy and technical execution, where we are critical partners to every team at Mixpanel. Our work requires a broad, generalist skill set across vulnerability management, threat detection, and access management. We strategically balance necessary compliance work with proactive initiatives, with a constant focus on automation as the path to a more efficient security program. We use our expertise in a variety of well-known security platforms and tools to create seamless, automated processes that empower our peers. We are a lean team by design, and we succeed or fail together, committed to transparent communication and a strong sense of ownership. Responsibilities Domain Ownership: Serve as the domain expert for Detection & Response, integrating telemetry from across our entire ecosystem—including Product, Cloud, Corporate Infrastructure, and Identity—to build a unified, high-fidelity detection and response engine. Technical Project Execution: Translate high-level project requirements and technical scoping documents into actionable milestones, managing task delivery and driving cross-functional results. Architect Modern Detection: Design and imp

About Hexnode Hexnode is a global leader in Unified Endpoint Management (UEM), trusted in over 100 countries and managing millions of devices worldwide. With continuous innovation across Apple, Windows, Android, macOS, Linux, and tvOS ecosystems, Hexnode is redefining enterprise mobility and cybersecurity. As we expand our Extended Detection and Response (XDR) capabilities, we are building a next-generation data platform designed for massive scale, real-time intelligence, and high-performance security analytics. The Role We are looking for a Senior Data Platform Engineer to architect, scale, and optimize the core data infrastructure powering our XDR product. In this role, you will take ownership of the strategic evolution of our data layer — ensuring seamless ingestion, storage, indexing, search, and retrieval of high-volume security telemetry and device data. You will play a key role in transforming our platform into a highly scalable, cost-efficient, secure, and analytics-ready ecosystem that supports real-time detection, investigation, and advanced data science workflows. This is a high-impact individual contributor role focused on architecture, platform modernization, and long-term scalability. Key Responsibilities Architect and evolve the data layer to support high-throughput ingestion, real-time processing, and low-latency search across massive datasets. Evaluate existing search and storage platforms and drive modernization initiatives toward more scalable, performant, and cost-effective solutions. Design and implement optimized indexing, partitioning, and data structuring strategies for efficient querying and retrieval. Build and manage scalable data lake architectures that support advanced analytics, threat intelligence, and data science workflows. Define strategies for lifecycle management, retention, tiered storage, and cost optimization across the data platform. Ensure high availability, fault tolerance, and disaster recovery across distributed systems. I

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers. We are seeking a highly skilled Senior Incident Response Analyst to lead advanced threat detection, investigation, and remediation efforts within our Security Operations program. This role is responsible for handling complex security incidents, guiding junior analysts, improving detection capabilities, and strengthening our overall security posture. The Senior Incident Response Analyst brings deep technical expertise, strong analytical thinking, and a proactive mindset toward defending the enterprise.

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers. We are seeking a highly skilled Senior Incident Response Analyst to lead advanced threat detection, investigation, and remediation efforts within our Security Operations program. This role is responsible for handling complex security incidents, guiding junior analysts, improving detection capabilities, and strengthening our overall security posture. The Senior Incident Response Analyst brings deep technical expertise, strong analytical thinking, and a proactive mindset toward defending the enterprise.

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers. We are seeking a highly skilled Senior Incident Response Analyst to lead advanced threat detection, investigation, and remediation efforts within our Security Operations program. This role is responsible for handling complex security incidents, guiding junior analysts, improving detection capabilities, and strengthening our overall security posture. The Senior Incident Response Analyst brings deep technical expertise, strong analytical thinking, and a proactive mindset toward defending the enterprise.

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role At Verkada, our business development is different. We lean heavily on data- and analytics-driven metrics to develop and implement consistent, effective lead generation through automated programs— including much of cold outbounding that you, as a Verkada, MDR will execute. This allows our sales reps to focus on real conversations with high-level prospects rather than spend hours trying to get a hold of them. Each rep is able to set more than 80-100 demos/month (@ ~40% conversion to opportunities). As an MDR, you will have the opportunity to transition to an Account Executive (AE) role at Verkada at the end of ~12 months in the MDR program (where you will receive training and an appreciation for how Verkada generates business). We are committed to a thriving in-office culture. This role requires that you be on-site at our HQ in

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Onchain Investigator, you'll own end-to-end onchain investigations into the threat actors targeting Coinbase and the crypto ecosystem. You'll cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products. This role leads investigation methodology for the team, not just individual cases. What you'll do: Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and overall security posture Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation to launch Lead new investigative techniques, teach them across Sec

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role We are looking for a Threat Intelligence Engineer to join our Threat Intelligence team. In this role, you will build the infrastructure that powers our threat discovery capabilities—integrating external data sources, developing detection systems for automated lead generation, and creating internal tooling that scales our investigators' impact. This is a foundational engineering role on a small, high-impact team. You will take projects from proof-of-concept to production, work closely with investigators to understand their needs, and help scale what may become a multi-person collections function. Responsibilities: Build automated detection systems that use disparate signals to identify abusive behavior. Take systems from idea to proof-of-concept to production-grade with appropriate monitoring, documentation, and maintenance processes Develop and maintain YARA rule infrastructure, including tools for writing, validating, and testing rules against real data Create integrations with external threat intelligence platforms (e.g. VirusTotal, Censys, Urlscan) via MCP servers to enable multi-source correlation during investigations Build data pipelines that ingest intelligence from RSS feeds, CTI news sources, and partner sharing, using Claude to extract TTPs and generate targeted hunting queries Develop behavioral analytics capabilities using DBT-based frameworks and create searchable audit logging infrastructure Establish feedback loops with investigators to tune detection systems and reduce false positives Scrape and normalize data from external sources to feed threat detection and enrichment workflows You may be a good