Threat Intel Manager Jobs

The Challenge As the Senior Manager of the Cyber Threat Research & Intelligence team, you will guide Adobe's efforts to predict, identify, and respond to the changing threat environment. Your position is key to delivering high-quality intelligence at tactical, operational, and strategic levels. This intelligence helps Adobe's security teams and executive leaders make informed, proactive decisions. You will develop and enhance a leading threat research and intelligence program that transforms raw threat data into actionable insights. This program supports defenses based on adversary behavior and keeps Adobe ahead of advanced threat actors. This is an opportunity to lead with purpose, build Adobe's intelligence strategy, and make a measurable impact on how the organization understands and responds to important threats. What You Will Do Develop and take responsibility for the strategic vision of Adobe's Cyber Threat Research & Intelligence program, covering tactical, operational, and strategic intelligence pillars. Lead a senior team of threat intelligence researchers, balancing deep technical research with timely intelligence production and collaborator engagement. Coordinate the full intelligence lifecycle — from collection and processing to analysis, production, and dissemination — ensuring intelligence outputs are relevant, accurate, timely, and actionable. Build and manage Adobe's threat actor tracking program, maintaining profiles on advanced persistent threat (APT) groups, cyber criminal organizations, and hacktivists relevant to Adobe's industry and attack surface. Produce and deliver intelligence products at multiple levels: tactical reports (IOCs, TTPs, YARA/Sigma rules), operational assessments (campaign analysis, actor attribution), and strategic briefings (threat landscape, industry trends, geopolitical risk). Partner closely wit

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Staff Security Engineer, Threat Hunting About the job The Threat Detection and Response team is looking for a Staff Security Engineer who is passionate about solving the business’s toughest technical-security challenges; you will work within a Security Engineering team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security tooling, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program. Responsibilities In this role, you’ll: Be an Owner : Participate in daily operations tasks including, on-call rotation, architecting and developing well-engineered and performant detective tooling and autom

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. The security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We’re looking for a detail-oriented, collaborative Security Operations Engineer to join our Security blue team in Warsaw to help solve complex tracking challenges and ultimately scale our security infrastructure. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve: Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil. Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats. Conduct forensic analysis during security incidents to understand the scope and impact of incidents. Collaborating with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations. Develop and deliver t

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Compliance, Threat & Risk Assessment Manager The Threat & Risk Assessment (TRA) team strengthens Coinbase's global compliance risk management framework by leading enterprise-wide and targeted risk assessments for compliance and financial crime compliance. As a Compliance, Threat & Risk Assessment Manager, you'll sit at the intersection of compliance, governance, data, and cross-functional execution, translating complex financial crimes and regulatory risks into clear, actionable insights for senior stakeholders across Coinbase legal entities globally. What you'll do: Manage enterprise-wide compliance risk assessments, including inherent risk identification, control evaluation, residual risk determination, and articulation of key findings and risk themes Partner with MLROs, CCOs, and cross-functional stakeholders across Coinbase legal entities to deliver globally coordinated, locally relevant risk assessment outcomes Produce risk assessment reports, executive summaries, and governance materials for senior leadership, risk forums, and regulatory audiences Drive transaction monitoring and customer risk scoring coverage assessments and lead geographic risk rating updates ensuring ratings are current, risk-based, and operationally actionable Develop a compliance threat assessment framework including governance, methodology, documentation standards, and ongoing

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Threat Protection Team Identity Threat Protection (ITP), powered by cutting-edge Okta AI, shatters the mold of traditional login security. We deliver real-time, surgical defense against the most sophisticated and rapidly evolving threats. By deeply integrating with existing security infrastructure, ITP relentlessly analyzes user behavior and system data to proactively hunt down and neutralize risks before they impact our customers. Join an elite team of full-stack engineers, visionary data scientists, and pioneering ML engineers. We are not just redefining cloud authentication—we are engineering the next-gen security platform that continuously evaluates global threats and constructs a comprehensive, dynamic risk . ITP stands as the uncompromising guardian of trust and security, placing decisive risk prioritization at the core of every authentication and authorization decision. Identity Threat Protection with Okta AI The Staff Software Engineer Opportunity Okta is seeking a Staff Software Engineer to be a driving force on the ITP engineering team. This is your chance to dive into the deep end and solve the most critical and complex security challenges facing enterprises today. We seek a candidate who has not just experience, but a proven record of designing, building, launching, and scaling world-class security products —from concept to global deployment. You will be a technical cornerstone of a team that lives and breathes elegant solutions and

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Director of Detection Engineering and Threat Hunting Location: Remote, US Compensation: $220,000 to $240,000 base plus bonus and equity What You’ll Do: We are seeking an experienced leader to own the strategy, execution, and growth of our North American Detection Engineering & Threat Hunting (DE&TH) operations. While you will align with the DE&TH Director on the overarching 18-month vision, you will have autonomy to drive the operational tempo and outcomes for your region. You will provide weekly supervision to focus on scaling the team, managing regional hiring/budgeting, and serving as a strategic partner to Product and Engineering. You will manage a team of technical practitioners. Your mission is to operationalize our "hunt-to-detect" feedback loop at scale, ensuring that our detection portfolio matures in lock-step with our platform's gro

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer you will join our OpenAI engineers and researchers in building, operating and securing transformational AI technologies. This role will focus on all aspects of Detection & Response but with a strong emphasis on detecting insider threats and influencing controls to safeguard OpenAI's most sensitive assets. In this role, you will: In this role, you will: Innovate on Detection and Response infrastructure to engineer and automate end-to-end detection and investigation workflows. Develop, measure, and tune detection rules to ensure effective and sustainable operations. Drive projects across OpenAI’s technology stack with a focus on insider threats, ranging from access abuse and intellectual property theft to novel risks emerging within AI infrastructure. Partner closely with cross-functional stakeholders, including HR, Legal, and peer investigative teams, providing technical expertise and evidence to support investigations. Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture. You might thrive in this role if you: 5+ years experience working in a detection/response or insider-risk role.. We are seeking mid-level and senior candidates. You have broad familiarity with operating systems and platforms such as macOS, Windows, Linux, and Kubernetes, along with experience in cloud infrastructure. Knowledge of modern adversary tactics and attack paths, data exfiltration techniques, and h

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Manager, MDR & Threat Hunting to join our team. This is a remote (USA) role, reporting to the Director, MDR & Threat Hunting. This role leads an important customer-facing team of elite threat hunters and MDR responders, responsible for both the operational excellence of the service and the health of the customer relationships. The Manager serves as the frontline leader who translates complex threat intelligence, hunting, and security outcomes into clear executive value, keeping customers confident, engaged, and retained. Their impact is measured not only by the quality of hunts and investigations, but by their ability to build a team that customers trust and a service that consistently proves its worth. What you’ll do (Role Expectations) Build, lead, and continuously develop a high-performing team of customer-facing threat hunters and MDR specialists, setting clear expectations, driving acc

Security Specialist – Insider Risk, Threat Intelligence & Physical Security, AI & Automation — Manassas, VA - Fab 6. Apply via Workday.

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Safeguards organization builds the policies, evaluations, and detection and enforcement systems that define and hold the limits on how Claude can be used. Within Safeguards, our Policy, Enforcement, and Threat Intelligence teams work as one org: Policy Design defines what is and isn't allowed across harm areas, Enforcement detects and acts on violations, and Threat Intelligence investigates sophisticated misuse and emerging threats. That work runs across a lot of teams and moves fast. A single decision can touch model training, detection systems, product launches, legal review, and external communications. As the org's program manager, you'll keep all of it moving: tracking the portfolio across all three teams, running the processes that connect their work to each other and to the rest of the company, and making sure the right people are aligned before decisions land. Your work will include the operating rhythm (planning, priorities, status, and decision tracking), launch and release readiness across policy, enforcement, and threat intelligence workstreams, and the processes that support how we share our work externally, including blog posts, threat reports, and other publications. You'll work closely with the org's leadership to spot risks early, clear blockers, and keep everyone pointed in the same direction. This role is a good fit for someone who brings structure to ambiguous, fast-moving work without adding overhead, and who can earn the trust of policy experts, researchers, and engineers alike. Important context for this role: some of the work may involve exposure to explicit content, including materia

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Research Group (ARG) handles proactive threat hunting and adversary behavior analysis across Stripe products. Rather than reacting to alerts, the team maps end-to-end fraud and abuse paths, validates novel attack vectors, and identifies product conditions that enable fraud. Using agentic automated testing and simulation tools, ARG translates research into actionable threat advisories, strategic control recommendations, and regression scenarios to systematically eliminate vulnerabilities. What you’ll do As an Abuse Research Engineer in the Abuse Research Group, you will play a critical role in safeguarding Stripe’s financial ecosystem by proactively hunting for advanced threats, dissecting complex fraud vectors, and extracting actionable adversary intelligence. Rather than relying solely on reactive alerts, you will develop and execute hypothesis-driven threat hunting operations across internal telemetry and external sources to uncover fraudulent tools, tactics, and techniques (TTPs) before they impact Stripe’s platform. Central to this work is FT3 (Fraud Taxonomy 3.0), Stripe’s multi-layered taxonomy that decomposes monolithic fraud into structured kill chains. Collaborating cross-functionally with Fraud Ops, Strategy, Risk, Onboarding, and Security, you will integrate threat intelligence, build agentic simulation workflows, and systematically eliminate product vulnerabilities. Responsibilities Proactive Threat Hunting &amp

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer’s digital assets and infrastructure through proactive threat detection, response, and risk mitigation across on-premises, cloud, and hybrid environments. The Manager, Email Security Engineering is responsible for leading and advancing enterprise-wide protections across email, collaboration, and messaging platforms—critical threat surfaces within the Cyber Defense organization. Email remains a primary vector for phishing, business email compromise, malware delivery, and account takeover in the pharmaceutical industry. This role will lead the design, implementation, and continuous improvement of email security capabilities across our global enterprise. The role is critical to protecting research, clinical, manufacturing, and corporate environments by delivering resilient, scalable, and compliant controls that prevent, detect, and respond to email-borne threats. ROLE RESPONSIBILITIES Lead Email Security Engineering initiatives across enterprise email, collaboration, and messaging platforms, including secure email gateways, cloud email security, anti-phishing, anti-malware, and domain protection capabilities. Define and execute the email security strategy and roadmap in alignment with the evolving threat landscape, business priorities, and regulatory requirements. Own the engineering and lifecycle management of email security technologies, including deployment, configuration, policy tuning, automation, integration, performance, and continuous optimization. Strengthen defenses against phishing, business email compromise, malicious attachments and links, spoofing, impersonation, and account takeover through layered preventive and detectiv

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats. Triage escalated alerts to determine whether a security incident is occurring or may occur imminently. Respond to security incidents, whether as an incident commander or as an incident responder Make us more efficient through building tools and automations that eliminate repetitive processes Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements. Participate in a light on-call rotation. Who You Are: You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains. You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform. You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive contr

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As a Principal Security Firmware Engineer on Micron's enterprise SSD team, you will design and develop security features that protect next-generation storage products against evolving cybersecurity threats. You will architect and implement cryptography-based solutions — including data encryption, Root of Trust, Secure Boot, Device Attestation, and Self-Encrypting Devices (SED) — while leading the transition to post-quantum cryptography for future product generations. This role spans the full Security Development Lifecycle, from threat modeling and architecture through implementation, testing, and certification. You will work across SoC, FPGA, and simulation platforms and collaborate cross-functionally to deliver security solutions aligned with industry standards including OCP, TCG, NVMe, and PCIe. Responsibilities Design and develop security features for Micron enterprise SSDs, protecting against cybersecurity threats across the product lifecycle Architect, implement, and debug cryptography-based security solutions including data encryption, Root of Trust, Secure Boot and Update, Device Attestation, and Self-Encrypting Devices (SED) Lead the transition to post-quantum cryptography algorithms (LMS, ML-DSA, ML-KEM) for next-generation products Implement security protocols aligned with OCP, TCG, NVMe, and PCIe specifications Debug security firmware on SoC, FPGA, and simulation platforms using tools such as JTAG, memory dumps, and bus analyzers Dri

🚀 About WRITER WRITER is where the world's leading enterprises orchestrate AI-powered work. Our vision is to expand human capacity through superintelligence. And we're proving it's possible – through powerful, trustworthy AI that unites IT and business teams together to unlock enterprise-wide transformation. With WRITER's end-to-end platform, hundreds of companies like Mars, Marriott, Uber, and Vanguard are building and deploying AI agents that are grounded in their company's data and fueled by WRITER's enterprise-grade LLMs. Valued at $1.9B and backed by industry-leading investors including Premji Invest, Radical Ventures, and ICONIQ Growth, WRITER is rapidly cementing its position as the leader in enterprise generative AI. Founded in 2020 with office hubs in San Francisco, New York City, Seattle, Austin, Chicago, and London, our team thinks big and moves fast, and we're looking for smart, hardworking builders and scalers to join us on our journey to create a better future of work with AI. 📐 About the role This is where security meets innovation at enterprise scale. As a staff security engineer, applications at WRITER, you'll be building the security foundations that protect the AI systems powering some of the world's most recognizable brands. You'll work at the intersection of application security, AI infrastructure, and developer enablement—partnering with engineering teams to embed security into every line of code while ensuring our platform remains both powerful and trustworthy. The opportunity is massive: you'll help define how enterprise AI applications are secured, from threat modeling our LLM architectures to building automated security controls that scale across our growing platform. This isn't about saying "no"—it's about finding creative ways to say "yes, and here's how we do it securely." You'll tackle challenges that most security engineers never encounter: securing AI agents, protecting training data pipelines, and designing controls for systems tha