Threat And Analytics Lead Jobs

Senior Malware Analyst (Media, Malware, and Analysis – MMA) US CITIZEN ONLY Job Type Full-time Location Annopolis Junction, MD Clearance Requirement TS/SCI with CI polygraph Position Description The Senior Malware Analyst provides advanced technical expertise in malware analysis, digital forensics, and cyber threat intelligence in support of USCYBERCOM cyberspace operations. This role directly supports operations across USCYBERCOM J3, Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES), delivering critical insights into adversary tactics, techniques, and procedures (TTPs) targeting the Department of Defense Information Network (DODIN) and associated mission systems. The analyst performs deep technical analysis of malicious code, compromised systems, and digital media to identify threats, develop mitigation strategies, and enhance operational situational awareness. This position contributes to mission assurance, defensive cyberspace operations (DCO), and offensive cyberspace operations (OCO) by enabling timely, actionable intelligence and supporting enterprise cyber defense and exploitation capabilities. Key Responsibilities Conduct static and dynamic malware analysis , reverse engineering, and forensic examination of compromised systems and digital media to identify adversary TTPs and intrusion artifacts. Perform media exploitation and forensic analysis , including extraction and analysis of malicious files, logs, and system artifacts across Windows, UNIX/Linux, and network environments. Develop and disseminate technical intelligence reports, threat briefs, and executive summaries to support operational decision-making and leadership awareness. Identify and develop indicators of compromise (IOCs) , signatures, heuristics, and MD5 hash repositories to support detection and mitigation strategies. Analyze and correlate cyber threat intelligence (all-source, SIGINT, and technical data) to identify patterns, anomalies, and emerging thr

About BlueConic: We are building products with AI at the core, and we build our products using AI. Agents and skills write a share of our code, run parts of our SDLC, and operate alongside our engineers every day. We need a Staff Security Engineer who can secure that reality, not the SDLC of five years ago. In conjunction with the CISO you represent security across the product development lifecycle, lead threat modeling and vulnerability management, and drive secure coding practices in an environment where code review means reviewing agent output as often as human output. You will use AI agents and skills as core tools of your own job: building automation, running threat models, triaging vulnerabilities, and scaling your impact across teams. Lead Security Engineer What you'll do Drive adoption of secure coding practices, including practices specific to AI-generated and AI-assisted code. Conduct security assessments, threat modeling, and risk analysis so threats are understood, documented, and mitigated. Automate security processes wherever it creates leverage, using scripts, AI agents, and AI skills as your default tools. Identify emerging classes of vulnerabilities and build solutions before they become incidents. Build and maintain security tooling, automation, and monitoring capabilities, including custom agents and skills for security workflows Threat model agentic systems: prompt injection, tool misuse, unauthorized agent privilege escalation, and data exfiltration through agent actions. Define guardrails and human-in-the-loop checkpoints for agent-driven changes to code and infrastructure. Set and enforce review standards for code produced by AI coding agents, including required checks before agent-authored changes reach production. Break large, cross-team security projects into individual tasks. Manage scope across teams and drive projects to closure. Monitor, investigate, and respond to security incidents, coordinating remediation across teams. S

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enforcement Analyst focused on Bio Harms, you will play a critical role in protecting against the misuse of AI systems for biological and related CBRNE harms. You will enforce our Usage Policy with a specific focus on detecting and mitigating bio risks, investigating potential violations, and help continuously strengthen our safeguards. The work sits at the intersection of biosecurity threat analysis and platform enforcement: you will read real model interactions and make fast, well-reasoned calls about whether activity is benign research or a credible attempt at harm. This role is a fit for someone who understands the dual-use nature of biology and enabling technologies well enough to separate the benign from the malicious. You will own and continuously improve the enforcement monitoring workflows for the bio-harms area, and you will work closely with Policy, Threat Intelligence, Data Science, and Engineering cross-functional partners to accomplish tasks at scale. Safety is core to our mission, and your work will directly protect individuals, communities, and critical systems. Important context for the role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including material of a sexual, violent, or psychologically disturbing nature. The role also carries a shared on-call responsibility across the Policy and Enforcement teams. Key responsibilities Enforce Usage Policies with a specific focus on detecting and mitigating potential bio risks and harmful use of AI systems. Take ownership of enforcement monitoring workflows for the bio-harms area, improving end-

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enforcement Analyst focused on Chem & Explosives Harms, you will play a critical role in protecting against the misuse of AI systems for chemical and explosives harms. You will enforce our Usage Policy with a specific focus on detecting and mitigating these risks, investigating potential violations, and help continuously strengthen our safeguards. The work sits at the intersection of chemical and explosives threat analysis and platform enforcement: you will read real model interactions and make fast, well-reasoned calls about whether activity is benign research or a credible attempt at harm. This role is a fit for someone who understands the dual-use nature of chemistry and explosives technologies well enough to separate the benign from the malicious — and who acts decisively under ambiguity. You will own and continuously improve the enforcement monitoring workflows for this harm area, and you will work closely with Policy, Threat Intelligence, Data Science, and Engineering matrix partners to accomplish tasks at scale. Safety is core to our mission, and your work will directly protect individuals, communities, and critical systems from AI-facilitated weapons harm. Important context for the role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including material of a sexual, violent, or psychologically disturbing nature. The role also carries a shared on-call responsibility across the Policy and Enforcement teams. Key responsibilities Enforce Usage Policies with a specific focus on detecting and mitigating potential chemical and explosives risks and harmful us

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Principal Software Engineer to lead the architecture, development, and evolution of a large-scale malware analysis and cybersecurity platform. This role will own the end-to-end technical architecture across Python-based analysis pipelines, message-driven job orchestration systems, Windows VM sandbox environments, and web-based interfaces. The ideal candidate brings deep expertise in software engineering, malware analysis, and distributed systems, with a proven ability to take ownership of complex legacy platforms and drive modernization initiatives. You will lead the design and implementation of advanced detection capabilities, including behavioral analysis, malware sandboxing, machine learning-based classification, and support for new file types, while ensuring platform scalability, reliability, and performance. This position requires strong hands-on development skills in Python with Linux-based production environments, messaging architectures such as RabbitMQ, virtualization technologies, and cloud-native deployment practices. As the technical leader for the platform, you will establish engineering standards, guide architectural decisions, reduce technical debt, mentor senior engi

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Role Overview SonicWall is seeking a Distinguished Engineer to define and drive the long-term technical vision, architecture, and evolution of its Secure Private Access (SPA) platform and Zero Trust access technologies. This role serves as the highest level of individual contributor leadership, influencing architecture, engineering strategy, and innovation across multiple product and engineering organizations. The role builds upon SonicWall's current cloud-native SSE, ZTNA, and secure access initiatives. Key Responsibilities Define and drive the long-term technical vision and architecture strategy for SonicWall's Secure Private Access (SPA) platform and Zero Trust access technologies. Lead the design and evolution of highly scalable, secure, resilient, cloud-native distributed systems. Influence technical direction, architectural decisions, and engineering standards across multiple product and engineering organizations. Provide technical leadership during critical production incidents, customer escalations, and security events, driving root cause analysis and long-term architectural improvements. Serve as a trusted technical advisor to engineering and executive leadership. Mentor Principal Engineers and cultivate tech

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Responsibilities Lead development and optimization of a key dataplane module for SonicWall NGFW platforms. Design, implement, and enhance high‑performance packet‑processing paths using DPDK/ODP/OFP or similar frameworks. Diagnose and resolve complex performance, throughput, and latency issues in the dataplane. Collaborate with platform, networking, security, and QA teams to deliver features and product improvements. Prototype and evaluate new dataplane technologies, contributing to next‑gen NGFW capabilities. Influence architectural decisions, scalability strategies, and long‑term technical direction for dataplane components. Requirements 10+ years of experience in C/C++ systems‑level development for networking or embedded platforms. Strong hands‑on expertise in DPDK, ODP, OFP , or similar high‑performance packet‑processing frameworks. Solid understanding of L3/L4 networking protocols , including IPv4/IPv6, routing, NAT, VPN/IPsec/SSL, and related protocols. Proven ability to build multi‑threaded, low‑latency, high‑throughput systems. Strong knowledge of OS internals, memory and concurrency models, and network stack behaviour. Excellent debugging, performance tuning, and system analysis s

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior Detection Analyst to join our team. This is a remote role (in Costa Rica), reporting to the Manager, Detection Analyst in the Detection Operations Team. You will utilize our detection platform to analyze telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud to publish threats for our Managed Detection and Response customers. Additionally, by leading projects to improve the Detection Operations workflow through orchestration and automation, you will ensure our customers receive high-fidelity threat analysis and concisely written communication regarding emerging threats at scale. What You’ll Do (Role Expectations) Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS Publish and review threats for customers using concisely written communication to effec

The Challenge As the Senior Manager of the Cyber Threat Research & Intelligence team, you will guide Adobe's efforts to predict, identify, and respond to the changing threat environment. Your position is key to delivering high-quality intelligence at tactical, operational, and strategic levels. This intelligence helps Adobe's security teams and executive leaders make informed, proactive decisions. You will develop and enhance a leading threat research and intelligence program that transforms raw threat data into actionable insights. This program supports defenses based on adversary behavior and keeps Adobe ahead of advanced threat actors. This is an opportunity to lead with purpose, build Adobe's intelligence strategy, and make a measurable impact on how the organization understands and responds to important threats. What You Will Do Develop and take responsibility for the strategic vision of Adobe's Cyber Threat Research & Intelligence program, covering tactical, operational, and strategic intelligence pillars. Lead a senior team of threat intelligence researchers, balancing deep technical research with timely intelligence production and collaborator engagement. Coordinate the full intelligence lifecycle — from collection and processing to analysis, production, and dissemination — ensuring intelligence outputs are relevant, accurate, timely, and actionable. Build and manage Adobe's threat actor tracking program, maintaining profiles on advanced persistent threat (APT) groups, cyber criminal organizations, and hacktivists relevant to Adobe's industry and attack surface. Produce and deliver intelligence products at multiple levels: tactical reports (IOCs, TTPs, YARA/Sigma rules), operational assessments (campaign analysis, actor attribution), and strategic briefings (threat landscape, industry trends, geopolitical risk). Partner closely wit

About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Vulnerability Management Engineer to join our team! About the Role The Vulnerability Management Engineer drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. The role combines vulnerability data, asset and configuration intelligence, application-security testing, threat intelligence, and AI-assisted analysis to determine whether vulnerabilities are reachable, exploitable, and likely to represent an imminent organizational threat. Key Responsibilities Correlate threat intelligence and vulnerability findings with asset inventory, software configuration, system configuration, application testing, network exposure, ownership, and business criticality. Assess exploitability and reachability rather than relying on vulnerability severity alone. Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization. Determine whether exposure requires immediate incident response

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Hardware Design Engineer to lead the end-to-end development of next-generation network security appliances. This individual will be responsible for all phases of hardware product development, including requirements definition, architecture, detailed design, prototyping, validation, manufacturing support, and production release. The ideal candidate will have extensive experience designing high-performance networking platforms, embedded systems, and security-focused hardware products. Key Responsibilities Hardware Architecture & Product Development Own the complete hardware design lifecycle from concept through production and sustaining engineering. Translate product requirements into hardware architectures and detailed design specifications. Conduct technology evaluations, design trade-off analyses, and recommend optimal solutions. Select and qualify key components, technologies, and vendors. Drive product lifecycle management (PLM) activities, including product introduction, production release, field support, and post-launch analysis. Design & Development Design complex multi-layer PCBs for networking and security appliances. Perform circuit design, schematic capture, signal integ

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer, you will be reporting to the Manager of Application Security leading the Security Design and Review pod. You will play a pivotal role in shaping the growth of Information Security's (InfoSec) Application Security team, collaborating with engineering teams early in their processes to provide secure design solutions and establish security standards. Your responsibilities will include threat modeling, secure system design, automation, and penetration testing. As a key member of the team, you will drive company-wide projects across diverse tech stacks, working with engineering leaders to remediate security challenges. You will define and evolve the technical vision for scaling application security practices across the organization. You will: Lead company-wide security initiatives to address critical security challenges. Build and nurture cross-company relationships to achieve security objectives. Provide guidance on product security processes and standards. Define and expand partnerships with key engineering teams across Roblox. Apply critical thinking and analytical skills to develop security protocols and communicate effectively with stakeholders. Re

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Lead Modeling and Simulation Engineer Job Type: Full Time Location: Onsite Clearance Requirements: TS/SCI & Poly (MUST HAVE) Travel: Up to 10% ABOUT THE TEAM SIXGEN supports missions by serving government and commercial organizations as they overcome global cybersecurity challenges. In this position, you’ll provide meaningful support to our customer’s missions and operations. You’ll work alongside a team of highly skilled operators who are dedicated to using innovative processes, tools, and techniques to get things done. Key Responsibilities Lead the development and implementation of cyber-physical and virtual simulation environments, including test ranges and emulated networks Design and execute modeling frameworks to replicate real-world systems, threats, and operational scenarios Integrate live, virtual, and constructive (LVC) simulation capabilities to support training, testing, and mission rehearsal Collaborate with cyber operators, engineers, and analysts to ensure simulations accurately reflect threat behaviors and mission requirements Oversee the validation and verification (V&V) of models and simulation outputs to ensure accuracy and reliability Support data collection, analysis, and visualization from simulation activities to inform decision-making Ensure compliance with DoD/IC modeling and simulation standards, cybersecurity requirements, and system accreditation processes Required Qualifications Bachelor’s or Master’s degree in Computer Science, Engineering, Mathematics, or a relate

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Role Overview As our lead AI/ML Engineer , you will design, build, and scale the intelligence layer powering our next-generation security products. You will turn complex datasets—including configurations, security alerts, and raw network logs—into production-ready AI capabilities that drive automated analysis, reasoning, and intelligent recommendations. Key Responsibilities Architect AI Systems: Design and deploy robust Retrieval-Augmented Generation (RAG) pipelines, agentic workflows, and LLM applications tailored to parse and reason over security telemetry and unstructured logs. Model Development & Tuning : Train, fine-tune, and evaluate ML/DL models for pattern matching, anomaly detection, and classification across massive, heterogeneous security datasets. Ensure AI Trust & Alignment : Implement strict guardrails, evaluation frameworks, and safety alignment techniques to ensure all model outputs and recommendations are deterministic, safe, and highly accurate. Establish MLOps: Build and maintain scalable ML pipelines (from data preprocessing to model monitoring in production), collaborating closely with Data and Product Engineers to ensure low-latency, secure inferences. Required Experience & Ski

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Threat Intelligence team protects OpenAI’s technology, people, research, and infrastructure by proactively identifying and disrupting adversaries who seek to compromise our systems or misuse our models. We investigate sophisticated threats, build tooling to scale and augment analysis, and deliver intelligence that shapes security strategy and equips leadership with timely, risk-aware insights. We combine technical depth, investigative rigor, and strong cross-functional partnerships to uncover threats and drive impact across OpenAI’s security and research organizations. About the Role As a Technical Threat Investigator at OpenAI, you will help protect the company from sophisticated adversaries targeting OpenAI and the broader ecosystem, as well as those attempting to misuse our models in support of cyber operations. This is a deeply investigative role. You will independently conduct complex, end-to-end investigations into capable threat actors to understand their behavior, infrastructure, emerging techniques, and how AI is integrated into their workflows. You’ll use these insights to proactively identify malicious activity and drive detection, disruption, enforcement, and safety improvements across the company. You’ll translate your investigative findings into durable solutions that scale impact. You’ll build and own lightweight tooling, automate where it matters, and create AI-assisted workflows to make investigations faster, more repeatable, and more effective over time. In this role, you will: Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI’s models, products, and broader ecosystem. Think like an adversary — model attacker behavior, anticipate misuse patterns, and proactively hunt for, identify, and disrupt malicious activity. Leverage internal telemetry, OSINT, vendor data, a