Threat Intelligence Engineer Jobs

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We are looking for a threat intel manager to build and run our CBRN-E & Advanced Weapons team within Threat Intelligence. This team detects, investigates, and disrupts attempts to misuse Anthropic's AI systems for chemical, biological, radiological, nuclear, and explosives threats and for the development of advanced or novel weapons. You will mature this from a promising start into a rigorous program, hiring investigators with real CBRN-E, weaponization, and counterproliferation expertise, sharpening detection beyond broad harm screens into threat-specific capabilities, and personally leading the cases where scientific judgment determines whether we're seeing curiosity, legitimate research, or a genuine weapons-development attempt. The area carries significant engagement with government, biosecurity, and scientific stakeholders. Important context: In this position you may be exposed to explicit content spanning a range of topics, including those of a sexual, violent, or psychologically disturbing nature. This role may require responding to escalations during weekends and holidays. Key responsibilities Own strategy, priorities, and outcomes for the CBRN-E & Advanced Weapons mission area; mature it from an emerging function into a rigorous investigative program Hire, manage, and develop a team of investigators with deep domain expertise across biological, chemical, and weapons-development threat areas Personally lead investigations into attempts to use our systems to develop, enhance, or disseminate CBRN-E weapons, or advanced weapons capabilities Evolve detection from broad harm screens toward CBRN-specific signa

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Responsibilities Lead development and optimization of a key dataplane module for SonicWall NGFW platforms. Design, implement, and enhance high‑performance packet‑processing paths using DPDK/ODP/OFP or similar frameworks. Diagnose and resolve complex performance, throughput, and latency issues in the dataplane. Collaborate with platform, networking, security, and QA teams to deliver features and product improvements. Prototype and evaluate new dataplane technologies, contributing to next‑gen NGFW capabilities. Influence architectural decisions, scalability strategies, and long‑term technical direction for dataplane components. Requirements 10+ years of experience in C/C++ systems‑level development for networking or embedded platforms. Strong hands‑on expertise in DPDK, ODP, OFP , or similar high‑performance packet‑processing frameworks. Solid understanding of L3/L4 networking protocols , including IPv4/IPv6, routing, NAT, VPN/IPsec/SSL, and related protocols. Proven ability to build multi‑threaded, low‑latency, high‑throughput systems. Strong knowledge of OS internals, memory and concurrency models, and network stack behaviour. Excellent debugging, performance tuning, and system analysis s

Our Security team keeps Asana's employees, users, and customers safe by proactively addressing threats and fostering a culture of security across our product and operations. We're looking for a Staff Detection Engineer to join our Threat Response team in our Warsaw innovation hub. You'll own how we find threats: the detection logic, the telemetry it runs on, and the pipeline that ships it. Detection here is software. Rules are written as code, tested against real and synthetic attacker behavior, reviewed in pull requests, and deployed through CI/CD. You'll partner with our incident responders, infrastructure, and product teams to make sure that when something bad happens, we see it fast and with high signal. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve Design, build, and maintain high-fidelity detections across cloud infrastructure (AWS/GCP), identity providers (e.g., Okta), SaaS environments, endpoints, and the software supply chain. Own our detection-as-code pipeline in Panther: rule structure, unit and integration tests, review standards, and CI/CD deployment, so detection logic is treated as production code. Map and close coverage gaps against MITRE ATT&CK and the threat model for our environment, prioritizing the techniques most likely to be used against a SaaS company. Onboard and normalize new telemetry sources , working with infrastructure and IT to make sure the right logs exist, are complete, and are queryable. Measure and improve alert quality , tracking precision, time-to-triage, and false-positive rates, and tuning or retiring detections that don't earn their keep. Validate detections against real attacker behavior through purple-team exercises, atomic tests, and emulation, and feed findings back into rule development. Turn incidents and threat intelligence into detections , partnering with incident responders to convert lessons learned and emerging TTPs into durable coverage. Build enrichment and automati

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We’re looking for a highly skilled Platform Engineer to help scale and strengthen our Kubernetes-based production environment. In this role, you’ll take ownership of platform reliability, performance, and observability while working hands-on across Kubernetes, GCP, Terraform, and modern infrastructure automation. You’ll collaborate closely with Engineering and Product teams to influence architecture decisions, solve complex performance challenges, and design resilient, scalable systems that support our growing platform. This is a high-impact role for someone who thrives in technical problem-solving, cares deeply about operational excellence, and enjoys building platforms that engineers love to use. Responsibilities: Maintain and extend our Kubernetes platform Improve Performance & Reliability of our production platform Ensure proper observability of the production systems Assist with database and service performance tuning Collaborate with Development Engineers on impacts of new features Identify architecture bottlenecks and work with Engineering on new solutions Experience handling on-call response for public-facing services Collaborate with Support on operational runbooks Requirements

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . This Solution Engineering role typically involves 70% office or remote work within the regional country you are aligned to, supporting sales and channel technical activities, with up to 30% travel. This position is ideal for a self-starter who is passionate about technology, enabling teams, and connecting with individuals to address their requirements. The ideal candidate will possess proven hands-on experience with cybersecurity products, along with excellent communication and presentation skills. This is an excellent opportunity for an individual with prior experience in Pre-Sales, Support, or Professional Services in a Vendor, Channel, Customer, or Distribution role, who seeks a balance of channel and technical sales activities while building trusted relationships with partners. Responsibilities Include: Proactively lead technical discovery conversations to qualify and validate customer requirements and use cases, creating a bill of materials that aligns with customer needs and desired outcomes. Conduct technical sales presentations and product demonstrations across the SonicWall portfolio to audiences ranging from 1 to 100 individuals, keeping partners and customers informed of our new solutions and industry trend

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Location: This role supports the South England region. Candidates should be located within the territory or be willing to travel extensively throughout South England to support customers, partners, and business objectives. We are seeking a Solution Engineer for a role that typically offers 70% remote work within your designated regional country, supporting both sales and channel technical activities, with the potential for up to 30% travel. This position is ideal for a self-starter who is passionate about technology, enjoys enabling teams, and excels at connecting with individuals to address their needs. The successful candidate will possess proven hands-on experience with cybersecurity products, along with outstanding communication and presentation skills. This opportunity is well-suited for individuals with a track record in Pre-Sales, Support, or Professional Services within a Vendor, Channel, Customer, or Distribution context, who are eager to engage in a balanced mix of channel and technical sales activities while fostering trusted relationships with partners. Key Responsibilities: Proactive leader of technical discovery conversations to qualify and validate the customer requirements and use cases to build

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . CSE SRE – DBA Focus Job Description As a Software Dev Senior Engineer, you will own the reliability, scalability, and operational excellence of our Cloud-based services. You will define and enforce reliability standards, drive the adoption of SRE practices across engineering teams, and build the systems and tooling that keep our production infrastructure healthy. We follow a DevOps model: Development and Operations teams are integrated, and the SRE function acts as the reliability layer — setting Service Level Objectives, managing error alerts, and continuously reducing toil through engineering. Key Responsibilities: Lead on call response and triage – help design and lead the 24x7 response team for triage and rally engineering to address service degradation, facilitating process and communications along the way Define, publish, and continuously refine Service Level Indicators (SLIs), Service Level Objectives (SLOs), and Service Level Agreements (SLAs) for all critical services, partnering with product and engineering leadership. Own the error management practices, including monitoring and alerting, and surfacing notable errors to the development team Lead the design and implementation of comprehensive ob

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. Security engineers at Spotify protect our platform, employees, creators, and more than 700 million users. We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment. You will work within our detection engineering squad where the team owns alert triage, security investigations, threat hunting, and the detection engineering lifecycle. You will turn threat intelligence, incident learnings, and analyst feedback into effective detections and investigation workflows. You will partner closely with the detection infrastructure squad, which builds and operates Detection and Response platforms and telemetry pipelines, and with teams across Spotify to make sure your squad has the signals and capabilities needed to detect and respond to threats at Spotify's scale. We are a distributed team that values curiosity, sound judgment, clear communication, and continuous learning. We teach and learn from one another, adapt as the threat landscape changes, and focus our effort according to business needs and risk. What You'll Do Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available. <li style="font-size: 11pt; font-family: Arial, sans-serif

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE uses real-world attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk, Abuse Research, and Product Engineering to run rigorous experiments that balance effective risk mitigation with legitimate user activity and conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites to prevent threats from recurring and transfers mature controls to long-term product owners across Stripe. What you’ll do As an Abuse Control Engineer on the ACE team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors. When emerging threat patterns reveal weaknesses in Stripe products, ACE rapidly builds and experiments with technical safeguards. Guided by empirical evidence and Stripe’s Fraud Taxonomy 3.0 (FT3) framework, you will translate threat intelligence into precise technical control requirements, such as API rate limits, step-up challenges, parameter validation, and pre-debit holds. You will run experiments to evaluate risk reduction against the impact on legitimate user conversion, carefully balancing security and product velocity. You will manage controls through a structured incubation life

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE uses real-world attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk, Abuse Research, and Product Engineering to run rigorous experiments that balance effective risk mitigation with legitimate user activity and conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites to prevent threats from recurring and transfers mature controls to long-term product owners across Stripe. What you’ll do As an Abuse Control Engineer on the ACE team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors. When emerging threat patterns reveal weaknesses in Stripe products, ACE rapidly builds and experiments with technical safeguards. Guided by empirical evidence and Stripe’s Fraud Taxonomy 3.0 (FT3) framework, you will translate threat intelligence into precise technical control requirements, such as API rate limits, step-up challenges, parameter validation, and pre-debit holds. You will run experiments to evaluate risk reduction against the impact on legitimate user conversion, carefully balancing security and product velocity. You will manage controls through a structured incubation life

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Mumbai-based candidates are preferred. This is a Solution Engineering role typically is 70% office or remote working in the regional country you are aligned to, supporting sales and channel technical activities and up to 30% traveling. This role is aligned to someone who is a self-starter, passionate about technology, enabling teams and connecting with people to help solve their requirements. The ideal candidate must have proven hands-on experience in cyber security products, excellent communication, and presentations skills. This is a perfect opportunity for an individual with previous Pre-Sales, Support, or Professional Services proven experience at a Vendor, Channel, Customer or Distribution role, who is looking to have a balance of channel and technical sales activities and build trusted relationships with partners. Responsibilities Include Proactive leader of technical discovery conversations to qualify and validate the customer requirements and use cases to build out a bill of materials that meets the customer needs and aligns to the desired outcomes Conduct technical sales presentations, product, and solution demonstrations across SonicWall portfolio to an audience typically between 1-100 persons, keeping partn

About Us: AI needs a new infrastructure layer. We're building it at Modal. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp , Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g., Seaborn , Luigi ), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. The Role: We're looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform. This is an engineering role focused on automation. You'll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness. You'll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient. What You'll Work On: Detection Engineering Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents Improve visibility across cloud infrastructure, containers, identity system

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . We are seeking an experienced Principal Software Engineer to lead the architecture, development, and evolution of a large-scale malware analysis and cybersecurity platform. This role will own the end-to-end technical architecture across Python-based analysis pipelines, message-driven job orchestration systems, Windows VM sandbox environments, and web-based interfaces. The ideal candidate brings deep expertise in software engineering, malware analysis, and distributed systems, with a proven ability to take ownership of complex legacy platforms and drive modernization initiatives. You will lead the design and implementation of advanced detection capabilities, including behavioral analysis, malware sandboxing, machine learning-based classification, and support for new file types, while ensuring platform scalability, reliability, and performance. This position requires strong hands-on development skills in Python with Linux-based production environments, messaging architectures such as RabbitMQ, virtualization technologies, and cloud-native deployment practices. As the technical leader for the platform, you will establish engineering standards, guide architectural decisions, reduce technical debt, mentor senior engi

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Job Title: Distinguished Engineer - Data Architect Role Overview: We are looking for a Distinguished Engineer- Data Architect to design and build the data foundation for our AI-driven security platform. In this role, you will own the architectural blueprint and core implementation of our data strategy, transforming massive streams of high-velocity network traffic logs, customer configurations, and security alerts into high-performance, ML-ready data fabrics. As part of a lean, elite three-person Data & AI team, you will serve as the ultimate technical authority on data scale, streaming architecture, multi-tenant security, and cost-efficient storage systems. Key Responsibilities: Architect the Core Data Platform: Design, implement, and evolve a unified blueprint for streaming and batch data processing capable of ingesting, normalizing, and storing petabyte-scale, high-velocity security telemetry. Enable AI & Advanced Analytics: Partner directly with the Lead AI Engineer to architect the underlying storage, retrieval systems, and feature stores—including optimal vector database structures and data lakehouse layers—required for low-latency AI inference and training. Enforce Zero-Trust Data Governance: Architect s

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Role Overview As our lead AI/ML Engineer , you will design, build, and scale the intelligence layer powering our next-generation security products. You will turn complex datasets—including configurations, security alerts, and raw network logs—into production-ready AI capabilities that drive automated analysis, reasoning, and intelligent recommendations. Key Responsibilities Architect AI Systems: Design and deploy robust Retrieval-Augmented Generation (RAG) pipelines, agentic workflows, and LLM applications tailored to parse and reason over security telemetry and unstructured logs. Model Development & Tuning : Train, fine-tune, and evaluate ML/DL models for pattern matching, anomaly detection, and classification across massive, heterogeneous security datasets. Ensure AI Trust & Alignment : Implement strict guardrails, evaluation frameworks, and safety alignment techniques to ensure all model outputs and recommendations are deterministic, safe, and highly accurate. Establish MLOps: Build and maintain scalable ML pipelines (from data preprocessing to model monitoring in production), collaborating closely with Data and Product Engineers to ensure low-latency, secure inferences. Required Experience & Ski