Threat Intelligence Engineer Jobs

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional sales engineering or software development role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform ; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and o

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional sales engineering or software development role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform ; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and o

About Sayari: Sayari is the judgment infrastructure for trustworthy AI in economic security and commercial risk. The Sayari Commercial World Model resolves 11.7B+ primary-source records from 250+ jurisdictions forming the ground truth of global commerce. A Judgment Ontology, encoding over a decade of investigative tradecraft, and Superconductor, an agentic orchestration platform, deliver AI that reasons like an expert analyst, shows its work, and traces every finding to its source. Trusted by U.S. Customs and Border Protection, HM Revenue & Customs, and Fortune 500 enterprises, Sayari is used by thousands of professionals across 35+ countries to secure supply chains and dismantle illicit networks. Headquartered in Washington, D.C., with offices in London, Singapore, Tokyo, and Tel Aviv. POSITION DESCRIPTION This is not a traditional engineering role. As a Forward Deployed Engineer (FDE), you are at the critical intersection of our code, our clients, and their most critical missions. You will be deployed to our most strategic partners, embedding within their environments to solve high-stakes problems that have no textbook answers. You own the "last mile" of our product's impact , ensuring our technology fundamentally transforms how our users confront challenges such as financial crime, supply chain disruption, and threats to national security. You are equal parts engineer, strategist, and operator. One day you might be architecting a data pipeline within a client's cloud environment ; the next, you'll be writing production Python to integrate our API into a proprietary analytics platform; and by the end of the week, you could be briefing a C-level executive, intelligence analyst, or mission director on the outcomes your work has enabled. You thrive on ambiguity, operate with extreme ownership, and are relentless in your pursuit of delivering real-world value. You will act as a vital conduit between the front lines and our core engineering teams, turning you

P-1605 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems — from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers — and customer obsessed — we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. The Role At Databricks, we don’t just use the cloud; we are "cloud maximalists." Unlike most companies that treat multi-cloud as a backup strategy, we run our platform across every region of every major cloud provider (AWS, Azure, and GCP) simultaneously. This creates a massive, high-consequence engineering surface area that requires a unique breed of Production Engineer. In this role, you won’t just run our cloud environments; you will own and evolve the secure infrastructure, access patterns, and guardrails that keep Databricks’ global platform safe and compliant in production. You will be responsible for the "sovereign layer" of our infrastructure, ensuring that our Data Intelligence Platform operates with 100% reliability and security in highly regulated, air-gapped, and sovereign environments. If you are an engineer who views infrastructure as a software problem and thrives on the complexity of global-scale networking, IAM, and automation, this is your team. The Impact You’ll Have Security-Focused Cloud Operations Design, automate, and operate the IAM, account/subscription, and project lifecycle across AWS, Azure, and GCP, enforcing least-privilege and standardized access patterns at scale. Review, implement, and continuously improve cloud identity and access policies (IAM, Okta, Opal) to align with Data

The Company Sendbird is on a mission to build the AI workforce of tomorrow. For over a decade, we built the infrastructure behind conversations—chat, voice, video, messaging APIs—and became the #1 CPaaS platform for in-app communications. 4,000+ brands trust us. 7 billion messages flow through our platform every month. 300 million monthly active users. We powered conversations for DoorDash, Match Group, Noom, Yahoo Sports, Rakuten, and thousands of others. We were good at what we did. Really good. We also saw it early: AI would fundamentally reshape how businesses talk to customers. The infrastructure we'd spent a decade building would become commoditized. The value would move up the stack—into intelligence, into experience, into outcomes. We had a choice: protect what we built, or reinvent ourselves. We chose reinvention. In December 2024, we made the full strategic pivot to AI-first customer experience. By February 2025, we'd launched our AI agent for enterprise CX—built on a decade of conversation data, now with intelligence on top. And in November 2025, we rebranded to Delight.ai. The name says it all. AI's real promise isn't efficiency or cost savings. It's giving customers back something they lost—the feeling of being truly understood and cared for. Not satisfied. Delighted. The Product Delight.ai is the AI concierge for customer experience. Most AI agents forget you the moment the conversation ends. Ours doesn't. Delight.ai builds memory over time, learns preferences, and connects context across every channel—chat, SMS, email, voice, WhatsApp—without losing the thread. We're building AI that makes customers feel understood, seen, and remembered. The Role You'll own end-to-end delivery of core AI agent capabilities, from architecture to production, driving excellence across orchestration, prompt engineering, and platform scalability. You'll mentor the engineers around you and set the standard for AI-native development. This role is built f

About Wolt At Wolt, we create technology that brings joy, simplicity and earnings to the neighborhoods of the world. In 2014 we started with delivery of restaurant food. Now we’re building the delivery of (almost) everything and you’ll find us in over 500 cities in 30 countries around the world. In 2022 we joined forces with DoorDash and together we keep on dreaming big and expanding across the globe. Working at Wolt isn’t always easy, but it’s definitely exciting. Here you’ll learn more, build more, and ship more than in most other companies. You’ll be challenged a lot, but also have a lot of fun on the way. So, if you’re a self-starter with drive and entrepreneurial spirit, this could be the ride of your life. Growth Platform is how DoorDash, Wolt, and Deliveroo market as one. We're building a single AI-native marketing platform across all three brands, unifying customer data, intelligence, and execution so every partner team can launch faster, personalize better, learn continuously, and scale wins across brands. The scope is global, the ambition is large, and we're only getting started. We're hiring backend engineers who want to be at the front line of what engineering looks like in the age of AI. 💡 Why Growth Platform? An AI-first team by design. We don't use AI as a productivity add-on - we treat agentic coding as a core engineering discipline. We expect our engineers to build with AI agents, to challenge what's possible when the human-in-the-loop is a multiplier rather than a bottleneck, and to push the boundaries of what a focused team can ship. Real ownership, real impact. Growth Platform powers marketing across DoorDash, Wolt, and Deliveroo, reaching millions of users daily. You'll own features end-to-end, from the idea through production, and see your work matter at scale across three brands. Cross-org engineering at the frontier. We work across DoorDash, Wolt, and Deliveroo to unify customer data, intelligence, and execution into one platform. This is en

Security isn't just a checkbox at Delight.ai. It's the foundation everything else is built on. If you believe security should accelerate how people work, not slow them down, keep reading. The Company Sendbird is on a mission to build the AI workforce of tomorrow. For over a decade, we built the infrastructure behind conversations—chat, voice, video, messaging APIs—and became the #1 CPaaS platform for in-app communications. 4,000+ brands trust us. 7 billion messages flow through our platform every month. 300 million monthly active users. We powered conversations for DoorDash, Match Group, Noom, Yahoo Sports, Rakuten, and thousands of others. We were good at what we did. Really good. We also saw it early: AI would fundamentally reshape how businesses talk to customers. The infrastructure we'd spent a decade building would become commoditized. The value would move up the stack—into intelligence, into experience, into outcomes. In December 2024, we made the full strategic pivot to AI-first customer experience. By February 2025, we'd launched our AI agent for enterprise CX—built on a decade of conversation data, now with intelligence on top. And in November 2025, we rebranded to Delight.ai. The Product Delight.ai is the AI concierge for customer experience. Most AI agents forget you the moment the conversation ends. Ours doesn't. Delight.ai builds memory over time, learns preferences, and connects context across every channel—chat, SMS, email, voice, WhatsApp—without losing the thread. We're building AI that makes customers feel understood, seen, and remembered. The Role As part of the march towards our vision of building a powerful user engagement platform, we are assembling a world-class security team to protect our customers' data and earn their trust. Specifically, we need a Security Engineer who can help improve the security posture of our product and cloud infrastructure. What you will do Work with Engineering teams to help build secure products and infrastructure

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Product Security Data Platforms team is a newly established engineering team within Stripe Security. Our mission is to build the foundational infrastructure that provides our users with unprecedented visibility into the security posture of their Stripe integration. While Stripe is renowned for industry-leading payment protection, we are expanding our focus to provide a comprehensive security telemetry platform that helps businesses protect their entire digital ecosystem on Stripe. You'll contribute to a large-scale customer-facing security data pipeline and presentation layer. Much like modern security observability platforms and data lakes that have transformed cloud infrastructure, we're building an API-first service that transforms massive streams of behavioral data into actionable security intelligence. This team operates at the intersection of high-throughput data engineering and cybersecurity, creating the systems that will allow the world's most sophisticated companies to monitor, detect, and respond to threats in real time. What you’ll do As a Software Engineer on this founding team, you'll contribute to the technical design and implementation of our core security data pipelines. You'll help build the systems that capture security signals, process them at scale, and deliver them to users through robust, developer-friendly interfaces. This is an opportunity to grow quickly, make a meaningful impact from day one, and help shape a p

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Product Security Data Platforms team is a newly established engineering team within Stripe Security. Our mission is to build the foundational infrastructure that provides our users with unprecedented visibility into the security posture of their Stripe integration. While Stripe is renowned for industry-leading payment protection, we are expanding our focus to provide a comprehensive security telemetry platform that helps businesses protect their entire digital ecosystem on Stripe. As a founding member of this team, you'll architect a large-scale customer-facing security data pipeline and presentation layer. Much like modern security observability platforms and data lakes that have transformed cloud infrastructure, we're building an API-first service that transforms massive streams of behavioral data into actionable security intelligence. This team operates at the intersection of high-throughput data engineering and cybersecurity, creating the systems that will allow the world’s most sophisticated companies to monitor, detect, and respond to threats in real time. What you’ll do As a Senior Software Engineer on this founding team, you'll lead the technical design and implementation of our core security data pipelines. You'll define how we capture security signals, process them at scale, and deliver them to our users through robust, developer-friendly interfaces. If you have security domain knowledge, you'll have opportunities to help shape