Threat Intelligence Engineer Jobs

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Threat Intelligence Analyst on the Safety Intelligence team, you'll proactively hunt for emerging threats to Roblox's community before they become incidents. You'll work across harm domains, following actors, networks, and tactics as they move between child endangerment, violent extremism, extortion, fraud, and other critical harms to surface connections that single-domain efforts can miss. You'll combine internal platform data, open-source and off-platform collection, and AI-assisted tooling to turn weak signals into finished intelligence that drives detection, enforcement, product changes, and partnerships. You'll report to the Manager, Safety Intelligence and Investigations and partner closely with Investigations, Moderation Operations, Policy, Product, Engineering, Data Science, and Law Enforcement Operations. Please note: This role requires reviewing graphic, controversial, and offensive content in accordance with Roblox's handling policies. You will: Lead proactive, hypothesis-driven threat hunts across harm domains, using internal data, open-source intelligence, and off-platform collection to find the unknown unknowns: new actors, tactics, and evasion techniques, be

As Engineering Manager for Threat Detection, you will lead a high-performing team that powers Datadog's detection program. Threat Detection is the organization responsible for keeping Datadog ahead of an evolving threat environment: closing coverage gaps faster, raising the bar on signal quality, and shipping detections that hold up under the scale and complexity of cloud-native infrastructure. Your team will combine direct detection expertise, platform engineering, and applied AI to ship detections at a pace and scale traditional rule-writing alone cannot match. Examples of what your team will work on include detection-authoring agents, the detection platform that powers every rule in production, coverage analysis, alert triage and response automation, and the evaluation infrastructure that holds these systems to a high bar of fidelity. Detection authorship is a shared responsibility across the organization, and your team will contribute both by building the systems that scale our authoring capacity and by writing detections directly when their domain expertise is the right tool. You will partner closely with our Security Incident & Response Team (SIRT), Cyber Threat Intelligence (CTI), AI Engineering teams, and Datadog's broader Security organization. This is a high-impact leadership role: you will grow a team of security and software engineers responsible for building and executing our detection and AI strategy. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog Security's shift to AI-accelerated detection and response. Drive development of high-fidelity detections as a shared responsibility across the organization, ensuring your team's systems and direct contributions raise the bar on coverage and

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. The security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We’re looking for a detail-oriented, collaborative Security Operations Engineer to join our Security blue team in Warsaw to help solve complex tracking challenges and ultimately scale our security infrastructure. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve: Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil. Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats. Conduct forensic analysis during security incidents to understand the scope and impact of incidents. Collaborating with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations. Develop and deliver t

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Safeguards organization builds the policies, evaluations, and detection and enforcement systems that define and hold the limits on how Claude can be used. Within Safeguards, our Policy, Enforcement, and Threat Intelligence teams work as one org: Policy Design defines what is and isn't allowed across harm areas, Enforcement detects and acts on violations, and Threat Intelligence investigates sophisticated misuse and emerging threats. That work runs across a lot of teams and moves fast. A single decision can touch model training, detection systems, product launches, legal review, and external communications. As the org's program manager, you'll keep all of it moving: tracking the portfolio across all three teams, running the processes that connect their work to each other and to the rest of the company, and making sure the right people are aligned before decisions land. Your work will include the operating rhythm (planning, priorities, status, and decision tracking), launch and release readiness across policy, enforcement, and threat intelligence workstreams, and the processes that support how we share our work externally, including blog posts, threat reports, and other publications. You'll work closely with the org's leadership to spot risks early, clear blockers, and keep everyone pointed in the same direction. This role is a good fit for someone who brings structure to ambiguous, fast-moving work without adding overhead, and who can earn the trust of policy experts, researchers, and engineers alike. Important context for this role: some of the work may involve exposure to explicit content, including materia

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. About the Team The Security Operations (SecOps) team at Robinhood proactively safeguards our platform and millions of customers. We monitor, detect, and respond to security threats in real time while staying ahead of risks through threat intelligence, Red Team operations, and research partnerships. We are building the next generation of security operations—leveraging AI-driven automation, Autonomic Security Operations (ASO), and innovative detection frameworks to set the standard across the cybersecurity industry! About the Role As a Senior Security Engineer (IC5) on the Detection & Response team, you will drive our incident response strategy and build robust detection engineering frameworks. In this high-impact role, you will command high-stress incident responses, eliminate operational noise by developing an AI-native detection platform, and help shape the broader AI-agentic ecosystem for SecOps. You will work closely with cross-functional partners in Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications to protect Robinhood’s ecosystem. This role is based in our Bellevue, WA, Menlo Park, CA, and Denver, CO office(s),

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Security Posture Management (ISPM) Team At ISPM (formerly Spera Security), we are revolutionizing identity security for modern organizations. Our platform provides security leaders with end-to-end contextual visibility into their identity landscape—reducing risk, enhancing operational efficiency, and ensuring continuous compliance. We’re a fast-moving, high-impact team looking for an exceptional Staff Software Engineer to help shape the future of identity security and platform architecture. Hybrid work - 3 days a week from the office. What You’ll Be Doing As a Staff Software Engineer, you will serve as a technical authority and play a pivotal role in scaling our core platform. Your focus will span architecture, security research, and engineering excellence: Lead & Architect: Design, build, and scale high-performance software while driving architectural best practices across the R&D organization. Security & AI Innovation: Drive deep-dive research into cloud, SaaS ecosystems, and AI agents to build proactive detection models, mitigation strategies, and threat intelligence. Engineering Excellence: Elevate code quality, testing standards, system monitoring, and documentation across teams. Cross-Functional Ownership: Partner closely with Product and R&D to translate complex security requirements into scalable technical solutions. Scale & Optimize: Identify and resolve systemic performance bottlenecks and architectural challenges.

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Research Group (ARG) handles proactive threat hunting and adversary behavior analysis across Stripe products. Rather than reacting to alerts, the team maps end-to-end fraud and abuse paths, validates novel attack vectors, and identifies product conditions that enable fraud. Using agentic automated testing and simulation tools, ARG translates research into actionable threat advisories, strategic control recommendations, and regression scenarios to systematically eliminate vulnerabilities. What you’ll do As an Abuse Research Engineer in the Abuse Research Group, you will play a critical role in safeguarding Stripe’s financial ecosystem by proactively hunting for advanced threats, dissecting complex fraud vectors, and extracting actionable adversary intelligence. Rather than relying solely on reactive alerts, you will develop and execute hypothesis-driven threat hunting operations across internal telemetry and external sources to uncover fraudulent tools, tactics, and techniques (TTPs) before they impact Stripe’s platform. Central to this work is FT3 (Fraud Taxonomy 3.0), Stripe’s multi-layered taxonomy that decomposes monolithic fraud into structured kill chains. Collaborating cross-functionally with Fraud Ops, Strategy, Risk, Onboarding, and Security, you will integrate threat intelligence, build agentic simulation workflows, and systematically eliminate product vulnerabilities. Responsibilities Proactive Threat Hunting &amp

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Hardware Design Engineer to lead the end-to-end development of next-generation network security appliances. This individual will be responsible for all phases of hardware product development, including requirements definition, architecture, detailed design, prototyping, validation, manufacturing support, and production release. The ideal candidate will have extensive experience designing high-performance networking platforms, embedded systems, and security-focused hardware products. Key Responsibilities Hardware Architecture & Product Development Own the complete hardware design lifecycle from concept through production and sustaining engineering. Translate product requirements into hardware architectures and detailed design specifications. Conduct technology evaluations, design trade-off analyses, and recommend optimal solutions. Select and qualify key components, technologies, and vendors. Drive product lifecycle management (PLM) activities, including product introduction, production release, field support, and post-launch analysis. Design & Development Design complex multi-layer PCBs for networking and security appliances. Perform circuit design, schematic capture, signal integ

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . About the Role We are looking for a hands-on Product Designer to join the Unified Management Portal desig n team and help shape the unified experience that powers our product portfolio. The Unified Management Portal consolidates SonicWall’s network, endpoint, email, and cloud security products into a single portal with shared SSO, navigation, and design system — a major product reset. This is a B2B, enterprise-grade product design role — not consumer. The designer will design for IT administrators, security analysts, network engineers, and managed service provider partners who manage security for organizations of every size, from SMBs to global enterprises. The work centers on density, configurability, scale, and operational reliability — not consumer-style minimalism or marketing surfaces. This is a builder’s role on a small, senior team. The designer will own design end to end for product areas with significant business impact, partner closely with Product and Engineering, and work in an AI-augmented design environment where Claude and other AI tools are part of the daily workflow. What You’ll Do Own end-to-end design for one or more Unified Management Portal product areas, from discovery and

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Location: This role is available for candidates who reside in Ohio. We are seeking a highly motivated and customer-focused Solution Engineer to join our team. This role is primarily field-based, with approximately 70% of time spent working remotely or from a regional office within the assigned territory, supporting sales and channel technical activities. The position also requires up to 30% travel. As a trusted technical advisor, you will work closely with customers, partners, and internal teams to design, position, and demonstrate cybersecurity solutions that address complex business and security challenges. This is an excellent opportunity for professionals who enjoy combining technical expertise with customer engagement and relationship building. Key Responsibilities Partner with Sales teams to drive technical engagement throughout the customer lifecycle. Support channel partners including VARs, MSPs, and MSSPs with solution positioning, deployment, and ongoing technical support. Deliver product demonstrations, proof-of-concepts, technical presentations, and whiteboard sessions. Provide technical consultation and solution recommendations aligned with customer business objectives. Collaborate with Product Management

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Location: This role is available for candidates who reside in Ohio. We are seeking a highly motivated and customer-focused Solution Engineer to join our team. This role is primarily field-based, with approximately 70% of time spent working remotely or from a regional office within the assigned territory, supporting sales and channel technical activities. The position also requires up to 30% travel. As a trusted technical advisor, you will work closely with customers, partners, and internal teams to design, position, and demonstrate cybersecurity solutions that address complex business and security challenges. This is an excellent opportunity for professionals who enjoy combining technical expertise with customer engagement and relationship building. Key Responsibilities Partner with Sales teams to drive technical engagement throughout the customer lifecycle. Support channel partners including VARs, MSPs, and MSSPs with solution positioning, deployment, and ongoing technical support. Deliver product demonstrations, proof-of-concepts, technical presentations, and whiteboard sessions. Provide technical consultation and solution recommendations aligned with customer business objectives. Collaborate with Product Management

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking a seasoned Principal Platform Engineer to lead the evolution and performance of our Kubernetes-based production environment. In this role, you will drive reliability, scalability, and observability across mission-critical systems while working hands-on with Kubernetes, GCP, Terraform, and modern infrastructure automation. You will partner closely with Engineering and Support teams to optimize system performance, influence architectural decisions, and build resilient platforms that enable business growth at scale. Responsibilities: Maintain, scale, and enhance our Kubernetes production platform Improve the performance, reliability, and availability of production systems Ensure comprehensive observability across services, infrastructure, and applications (metrics, logs, traces, alerts) Diagnose and tune database and service performance across distributed systems Partner with Development teams to assess platform impact of new features and architectural changes Identify workflow friction and contribute to scalable, resilient technical solutions Collaborate with Support teams to build and maintain operational runbooks and impro

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Job Description We are looking for a Frontend Software Engineer to join our team building next-generation cloud-based cybersecurity solutions. You will contribute to the design, development, and maintenance of modern web applications that help protect customers from evolving security threats. As part of a collaborative engineering team, you will work across frontend and backend technologies, helping deliver scalable and reliable cloud services while building intuitive user experiences. Our development environment spans AWS cloud services and multiple endpoint platforms, providing opportunities to learn and grow across a diverse technology stack. Role and Responsibilities Design, develop, test, and maintain web applications using Vue3.js, Node.js, and TypeScript . Build responsive and user-friendly frontend experiences with a strong focus on usability and performance. Collaborate with product managers, UX designers, QA engineers, and other developers to deliver high-quality features. Troubleshoot issues, debug defects, and participate in improving application reliability and performance. Contribute to code reviews, technical discussions, and engineering best pract

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Job Description We are seeking a talented Client Software Engineer to join our team developing cloud-managed endpoint security applications. In this role, you will contribute to the design, development, and maintenance of endpoint security software across multiple platforms, helping deliver secure and reliable experiences for our customers. Our development environment spans Windows, macOS, Linux, Android, iOS, and AWS cloud technologies, providing opportunities to work across a broad range of technologies while growing your expertise in cybersecurity and endpoint protection. Role and Responsibilities Develop and maintain client-side software for Windows and Linux platforms. Write clean, efficient, and maintainable code using C/C++, Golang, and other relevant technologies. Collaborate with QA, product management, and other engineering teams to deliver high-quality features. Debug, troubleshoot, and resolve software issues across multiple platforms. Participate in code reviews and contribute to engineering best practices. Help improve application performance, stability, and security. Learn and apply modern software development tools, processes, and technologies. Required Skills and Qualifications: Bachelor's degree in C

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE Everpure is seeking a hands-on Senior Security Engineer to drive security operations from our Prague, Czech Republic location. In this role, you will contribute to operational excellence across incident response, threat hunting, threat intelligence integration, detection engineering, and security automation, bringing real-time visibility and rapid response to our 24/7 global security operations environment. This is a technical delivery and execution role , not a traditional monitoring position. You will work closely with detection engineers, threat intelligence analysts, incident response leadership, and our global Security Operations teams to build and refine detections, improve signal quality, execute threat hunts, automate workflows, and respond to complex security incidents with speed and precision. Success in this role is measured not by alert volume, but by signal quality, real threat detection, incident containment speed, automation maturity, and the effectiveness of response workflows . WHAT YOU'LL DO Detection Engineering: Design, implement, and maintain detections in Splunk and related security platforms. Develop detection-as-code content using formats such as YAML/JSON, incorporate unit and regression testing, map coverage to MITRE ATT&CK, and contribute to Sigma/YARA-L coverage expansion. Incident Response & Triage: Investigate suspicious activity and participate in incident triage, scoping, co