Threat Intelligence Engineer Jobs

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: Detection Engineering is responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. This role focuses on proactive threat detection, automation-first practices, and continuous improvement of detection coverage and accuracy, supporting the WPP SOC transformation into an Autonomic Security Operations model. What you'll be doing: Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms. Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats. Work with wider WPP engineering teams to ensure high-quality, normalized telemetry for effective detection. Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines. Root Cause Analysis (RCA) Conduct RCA on missed detections, delayed responses, and high-severity incidents. Identify technical and process-level causes of detection failures or inefficiencies. Drive corrective actions based on RCA outcomes (e.g., rule improvements,

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer on Detection & Response, you’ll help protect OpenAI’s most sensitive assets– including our intellectual property, customer data, and the infrastructure that supports them– by building and operating the systems we use to detect suspicious activity and respond effectively when it matters. You’ll work across endpoints, identity, cloud, hyperscale compute infrastructure, and datacenter-adjacent layers, partnering closely with security teams and infrastructure owners to define the telemetry and response requirements we need and building tooling and automation where it delivers the most leverage. In this role, you will: Build and evolve Detection & Response capabilities across OpenAI’s infrastructure, products, and research environments, with an emphasis on high-signal detection and reliable operational response. Engineer detection pipelines and tooling: develop rule lifecycle management, measurement/quality loops (coverage, precision, latency), tuning processes, and safe rollout patterns. Automate response and investigations by building workflows that reduce toil (triage, enrichment, containment, evidence capture) and improve time-to-understand/time-to-contain. Partner with other Security teams and system/infrastructure owners across the company to ensure new systems ship with the right telemetry, threat models, and response playbooks from day one. Define D&R requirements and drive visibility across endpoin

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer on Detection & Response, you’ll help protect OpenAI’s most sensitive assets– including our intellectual property, customer data, and the infrastructure that supports them– by building and operating the systems we use to detect suspicious activity and respond effectively when it matters. You’ll work across endpoints, identity, cloud, hyperscale compute infrastructure, and datacenter-adjacent layers, partnering closely with security teams and infrastructure owners to define the telemetry and response requirements we need and building tooling and automation where it delivers the most leverage. In this role, you will: Build and evolve Detection & Response capabilities across OpenAI’s infrastructure, products, and research environments, with an emphasis on high-signal detection and reliable operational response. Engineer detection pipelines and tooling: develop rule lifecycle management, measurement/quality loops (coverage, precision, latency), tuning processes, and safe rollout patterns. Automate response and investigations by building workflows that reduce toil (triage, enrichment, containment, evidence capture) and improve time-to-understand/time-to-contain. Partner with other Security teams and system/infrastructure owners across the company to ensure new systems ship with the right telemetry, threat models, and response playbooks from day one. Define D&R requirements and drive visibility across endpoin

RDQ126R35 About Databricks At Databricks, we empower data teams to solve the world’s toughest challenges—from security threat detection to cancer drug development. Our mission is to build the best data and AI infrastructure platform, enabling our customers to focus on innovation. Our engineering teams push the boundaries of data and AI technology while ensuring our platform operates with the resilience, security, and scale that businesses need to succeed. About the Role We are developing a growing ecosystem of applications and partners on the Databricks Data Intelligence Platform. Our team creates frameworks, tools, and best practices to enable seamless integrations, helping developers and partners build impactful solutions. As a Senior Staff Software Engineer, you will define the vision, architecture, and strategy for this ecosystem. You will play a key role in enabling customers to integrate cutting-edge applications, helping developers thrive on Databricks, and shaping the future of data and AI platforms. Your Impact Define and drive the ecosystem strategy for Databricks, a crucial pillar of our platform growth. Shape how applications and integrations enhance the Databricks experience for developers, partners, and customers. Develop frameworks, APIs, and tools that make it seamless for partners and developers to build, integrate, and scale applications within the Databricks ecosystem. Enable customers to integrate cutting-edge applications and specialized functionalities, helping them drive competitive differentiation and expand their AI and data capabilities. Lead and mentor engineers across teams, providing technical guidance, architectural direction, and career development support. Foster a culture of innovation, best practices, and knowledge sharing. Collaborate cross-functionally with product, engineering, and business development teams to align technical roadmaps with strategic business goals. Engage with open-source communities and advocate for best practi

P-1348 At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high value challenges that are central to their own missions. Our engineering teams build technical products that fulfill real, important needs in the world. We always push the boundaries of data and AI technology, while simultaneously operating with the resilience, security and scale that is important to making customers successful on our platform. We develop and operate one of the largest scale software platforms. The fleet consists of millions of virtual machines, generating terabytes of logs and processing exabytes of data per day. At our scale, we observe cloud hardware, network, and operating system faults, and our software must gracefully shield our customers from any of the above. As a Staff Software Engineer working on the Data Platform team you will help build the Data Intelligence Platform for Databricks that will allow us to automate decision-making across the entire company. You will achieve this in collaboration with Databricks Product Teams, Data Science, Applied AI and many more. You will develop a variety of tools spanning logging, orchestration, data transformation, metric store, governance platforms, data consumption layers etc. You will do this using the latest, bleeding-edge Databricks product and other tools in the data ecosystem - the team also functions as a large, production, in-house customer that dog foods Databricks and guides the future direction of the product. The impact you will have: Design and run the Databricks metrics store that enables all business units and engineering teams to bring their detailed metrics into a common platform for sharing and aggregation, with high quality, introspection ability and query performance. Design and run the cross-c

P-1348 At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high value challenges that are central to their own missions. Our engineering teams build technical products that fulfill real, important needs in the world. We always push the boundaries of data and AI technology, while simultaneously operating with the resilience, security and scale that is important to making customers successful on our platform. We develop and operate one of the largest scale software platforms. The fleet consists of millions of virtual machines, generating terabytes of logs and processing exabytes of data per day. At our scale, we observe cloud hardware, network, and operating system faults, and our software must gracefully shield our customers from any of the above. As a Senior Software Engineer working on the Data Platform team you will help build the Data Intelligence Platform for Databricks that will allow us to automate decision-making across the entire company. You will achieve this in collaboration with Databricks Product Teams, Data Science, Applied AI and many more. You will develop a variety of tools spanning logging, orchestration, data transformation, metric store, governance platforms, data consumption layers etc. You will do this using the latest, bleeding-edge Databricks product and other tools in the data ecosystem - the team also functions as a large, production, in-house customer that dog foods Databricks and guides the future direction of the product. The impact you will have: Design and run the Databricks metrics store that enables all business units and engineering teams to bring their detailed metrics into a common platform for sharing and aggregation, with high quality, introspection ability and query performance. Design and run the cross-

Leidos is hiring a Modeling and Simulation Engineer with an active TS/SCI clearance at Wright-Patterson Air Force Base, Ohio. The successful candidate will use strong technical capabilities and communication skills to collaborate with technical teams of engineers and scientists to develop, upgrade, and integrate models of threat systems in the air domain. Primary Responsibilities: Perform tasks related to the modeling of air-based system models using Simulink and MATLAB Perform tasks related to the integration of air-based system models into a large, many-on-many, real-time, C++ based simulation environment Collaborate with teams of government and contractor personnel Find, review, and assess available intelligence data to drive modeling decisions Test and evaluate models to ensure functionality before submitting to the customer Prepare model test and interface documentation in addition to other supporting documentation requested by the government customer Basic Qualifications: Bachelor’s degree in CS, CE, EE or a related field with 2+ years of applicable experience or an MS degree in CS, CE, EE, or a related field Experience with MATLAB/Simulink Experience with modeling and simulation (M&S) techniques Excellent English-language written and verbal communication. Strong emphasis on writing ability Great people skills and the desire to work with technical teams of engineers and scientists Ability to work independently and under deadlines in a mixed government-contractor environment To be considered, must have a current and active TS/SCI security clearance Preferred Qualifications: Experience working in the Intelligence Community, specifically with modeling and simulat

About Druva Druva is the resilience foundation for the AI enterprise, helping organizations secure and recover from connected risk across data, cyber, identity, and AI. The Resilience Cloud is a fully managed, cloud-native SaaS platform that delivers air-gapped and immutable protection across cloud, SaaS, on-premises, endpoint, and edge environments. Powered by Dru MetaGraph, Druva’s graph-powered intelligence layer, the platform connects critical business context so customers can understand risk, respond faster, recover cleanly, and govern data with greater confidence. Trusted by nearly 7,500 customers, including 75 of the Fortune 500, Druva helps safeguard the critical information and systems businesses depend on in an increasingly connected world. Visit druva.com and follow us on LinkedIn , X and Facebook . Experience Level: 6–10 Years Domain: Product Security / AppSec / DevSecOps / AI Security / AI-First SDLC Role Summary We are looking for a hands-on Senior Staff Product Security Engineer to join and lead initiatives across our product security landscape. In this role, you will redefine modern Product Security by architecting an AI-first SDLC seamlessly integrating traditional AppSec with advanced AI security practices, automating shift-left pipelines, conducting rigorous threat models for core services and complex AI architectures, and leveraging cutting-edge AI tools to accelerate vulnerability remediation. You will partner directly with engineering leadership, Information Security, GRC, BuildOps, and DevOps teams to secure our SaaS products and safely enable cutting-edge agentic features. Role & Responsibilities AI-First SDLC & Shift-Left Automation: Architect and embed AI-driven security controls (SAST, DAST, SCA, Container, Secrets Detection) directly into CI/CD build pipelines and developer workflows, establishing an intelligent, highly automated AI-first SDLC. Operational & Strategic AI Security: Lev

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join 𝕏 Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Detection Engineer to join our team. This is a Hybrid role in Pune, reporting to the Senior Manager, Threat Researcher in the Threat Hunting department. You will own a coverage area and be accountable for its technical direction, overall efficacy, and high-standard content development. You will decide what gets built next, set the bar for detection content, and personally handle the most complex design decisions and detector implementations. What you’ll do (Role Expectations) Take complete accountability for your domain's health, backlog prioritization, and performance - serving as the ultimate point of contact for its overall efficacy Personally tackle the hardest detection challenges to establish design patterns, coding standards, and implementation blueprints for the rest of the team Define clear criteria for validated, tuned, and maintainable content, using design/code reviews and

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Detection Engineer to join our team. This is a Hybrid role, reporting to the Senior Manager in the Threat Hunting department. You will analyze emerging threats, adversarial behaviors, and tactics, techniques, and procedures (TTPs) to understand attacker methodologies and improve detection capabilities across our global ecosystem. This role requires conducting proactive and retroactive threat hunting using Zscaler telemetry while working flexible schedules, including weekend night shifts, to meet global operational demands. What you’ll do (Role Expectations) Pick the handful of numbers that tell you the area is healthy (fidelity, false-positive and false-negative rates, ATT&CK coverage, detector regressions) and do the work to move them in the right direction Take what threat intel, hunts, and the analysts consuming your alerts tell you and turn it into what gets fixed and built next Lead

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud-native applications and systems throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and emerging AI technologies. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks Manage vulnerability tracking and remediation efforts, providing guidance to development teams Support incident response activities related to application security Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures Evaluate and secure software supply chains, including producing and

Block is one company built from many blocks, all united by the same purpose: economic empowerment. We build technology that increases access and independence for sellers, individuals, and artists around the world. Working at Block means working on and across our brands—Square, Cash App, Afterpay, TIDAL, Spiral, and Proto— in roles that connect, enable, and push all of them forward faster. We’re remote-first by design and operate with intelligence at the center of everything we do. At Block, you'll be challenged by some of the brightest, most creative minds in the industry and have the tools and autonomy to do the most meaningful work of your career The Role The Network Edge Security team builds the tools that provide important insights to our API Security posture and trustworthiness of traffic flowing into our systems. Our capabilities use machine learning, streaming analytics, and significant data analysis to provide insights into understanding our network edge risk exposure and the true sources of our request flows. The team’s primary focus is up-leveling our API security posture for downstream products and services. However, there is also a need at times to respond quickly to emerging threats to take action at the edge to provide immediate relief. The team is small, requiring nimbleness and flexibility to stay ahead of threat actors. You should have a strong passion for the problem space – needing to understand a significant range of knowledge around Content Distribution Networks (CDN), analytical tools, network protocols and behavior, as well as authentication and authorization systems. You will work closely with many teams across the organization both engineering and operational to gain the insights required to understand the problem space as well as monitor the effectiveness of our solutions. You Will Respond and mitigate emerging threats and attacks at our network edge by leveraging WAF rules, bot vendors, and other CDN-native technologies Help build ou

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Software Development Engineer (Backend) to join our team. This is a Hybrid (Bangalore) role, reporting to the Director, Threat Researcher in the Engineering department. In this role, you will architect, scale, and operate complex distributed systems and cloud-native platforms running on Kubernetes and cloud infrastructure. You will own end-to-end technical initiatives, set high standards for reliability and performance, and multiply the overall impact of the engineering team. What you’ll do (Role Expectations) Lead the design, development, testing, and evolution of backend services and APIs, making sound architectural trade-offs with a focus on scalability, reliability, performance, and maintainability Drive services end to end — development, deployment, scaling, monitoring, and ongoing production support — and set the standard for operational ownership across the te

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Threat Researcher to join our team. This is a remote role, reporting to the Manager Threat Research in the Threat Research Team. As our Staff Threat Researcher, you will serve as a highly technical subject matter expert on adversary tradecraft across endpoint, cloud, and identity environments. You will apply formal research methodologies to dissect and replicate complex cyber attacks, answering the critical questions of exactly how techniques work and how we can best detect them. By transforming your deep technical discoveries into practical attack automations and scalable detection recommendations, you will bridge the gap between theoretical research and operational defense. In this role, your expertise will directly strengthen our defensive capabilities, inform our detection engineering priorities, contribute to broader product strategy, and keep our customers a step ahead of evolving evasi