Threat Intelligence Engineer Jobs

Senior Malware Analyst (Media, Malware, and Analysis – MMA) US CITIZEN ONLY Job Type Full-time Location Annopolis Junction, MD Clearance Requirement TS/SCI with CI polygraph Position Description The Senior Malware Analyst provides advanced technical expertise in malware analysis, digital forensics, and cyber threat intelligence in support of USCYBERCOM cyberspace operations. This role directly supports operations across USCYBERCOM J3, Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES), delivering critical insights into adversary tactics, techniques, and procedures (TTPs) targeting the Department of Defense Information Network (DODIN) and associated mission systems. The analyst performs deep technical analysis of malicious code, compromised systems, and digital media to identify threats, develop mitigation strategies, and enhance operational situational awareness. This position contributes to mission assurance, defensive cyberspace operations (DCO), and offensive cyberspace operations (OCO) by enabling timely, actionable intelligence and supporting enterprise cyber defense and exploitation capabilities. Key Responsibilities Conduct static and dynamic malware analysis , reverse engineering, and forensic examination of compromised systems and digital media to identify adversary TTPs and intrusion artifacts. Perform media exploitation and forensic analysis , including extraction and analysis of malicious files, logs, and system artifacts across Windows, UNIX/Linux, and network environments. Develop and disseminate technical intelligence reports, threat briefs, and executive summaries to support operational decision-making and leadership awareness. Identify and develop indicators of compromise (IOCs) , signatures, heuristics, and MD5 hash repositories to support detection and mitigation strategies. Analyze and correlate cyber threat intelligence (all-source, SIGINT, and technical data) to identify patterns, anomalies, and emerging thr

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role AI is changing both sides of the security equation, and Anthropic is focused on putting frontier AI capabilities in the hands of defenders. Cybersecurity is a fast-growing area for Anthropic, spanning enterprise security teams that adopt Claude for their own security work and security companies that build their products on our models. The buyers are demanding and data-driven, from CISOs to hands-on practitioners in security engineering, application security, security operations, threat intelligence, and incident response. As Field Marketing Lead, Cybersecurity, you will lead Anthropic's field marketing for the cybersecurity audience around the world, helping position Claude as the trusted AI partner for security teams. You will align closely with the sales organization, develop the marketing strategies and tools the field needs, and partner with Anthropic's cybersecurity experts in product marketing, solutions marketing, and across the business to turn their positioning and messaging into programs and campaigns. You will be the cybersecurity lead that our campaigns and regional field marketing teams draw on, working with customers in every segment and with a focus on expanding within existing accounts. You will make sure that how we show up to CISOs, practitioners, and the buying committee is credible, consistent, and tied to revenue, whether in a global campaign, an executive roundtable, or a flagship industry event. Location: this is a global role, with a preference for candidates based in San Francisco or New York. Key responsibilities Own the global cybersecurity field marketing plan: define how we reach CISOs, prac

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role You will be a strategic contributor to our cybersecurity marketing efforts, positioning Claude as the trusted AI partner for CISOs, security operations teams, threat intelligence analysts and beyond. This is an important role that requires deep understanding of the cybersecurity ecosystem combined with the ability to craft compelling positioning and messaging around AI's benefit to defenders and the organizations they protect. Working closely with sales, product, partnerships and communications teams, you'll be responsible for bringing cybersecurity launches, features, and messaging to market through various channels while ensuring cohesive positioning across audiences. This role needs someone who can set vision and strategy while being hands-on with execution, from launching product capabilities for security operations and sector-specific tools to quarterbacking demand generation campaigns that drive adoption. Working at the intersection of AI safety, the evolving threat landscape, and campaigns, you'll help shape industry conversations around AI's role in cyber defense that drive measurable pipeline and impact results. Key responsibilities Coordinate and execute a comprehensive marketing strategy for cybersecurity across key segments: enterprise security operations, threat intelligence, detection and response, governance/risk/compliance, MSSPs and more Craft differentiated positioning and messaging across solutions pages, campaign materials and content for distinct audiences within the vertical Support go-to-market for product and solution launches including sector-specific offerings and relevant MCP integrations and

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . SonicWall delivers Boundless Cybersecurity for the hyper-distributed era in a work reality where everyone is remote, mobile and unsecure. SonicWall safeguards organizations mobilizing for their new business normal with seamless protection that stops the most evasive cyberattacks across boundless exposure points and increasingly remote, mobile and cloud-enabled workforces. By knowing the unknown, providing real-time visibility and enabling breakthrough economics, SonicWall closes the cybersecurity business gap for enterprises, governments and SMBs worldwide. For more information, visit www.sonicwall.com or follow us on Twitter, LinkedIn, Facebook and Instagram. The Global Data Management Senior Specialist position is in Taipei, Taiwan. Primary Responsibilities: - Work with electronic/mechanical engineers for NPI Proto BOM structure and BOM redlines in Agile. - Work with regulatory team and ODMs to proceed manufacturers’ datasheet and RoHS/SDoC documents through Agile MD ticket and AML updates. - Evaluate internal engineering change requests and supplier change requests (SCR) and drive appropriate feasibility discussions and approval for further ECR / ECO process. - Work with electronic/mechanical engineers

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Onchain Investigator, you'll own end-to-end onchain investigations into the threat actors targeting Coinbase and the crypto ecosystem. You'll cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products. This role leads investigation methodology for the team, not just individual cases. What you'll do: Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and overall security posture Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation to launch Lead new investigative techniques, teach them across Sec

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enforcement Analyst focused on Bio Harms, you will play a critical role in protecting against the misuse of AI systems for biological and related CBRNE harms. You will enforce our Usage Policy with a specific focus on detecting and mitigating bio risks, investigating potential violations, and help continuously strengthen our safeguards. The work sits at the intersection of biosecurity threat analysis and platform enforcement: you will read real model interactions and make fast, well-reasoned calls about whether activity is benign research or a credible attempt at harm. This role is a fit for someone who understands the dual-use nature of biology and enabling technologies well enough to separate the benign from the malicious. You will own and continuously improve the enforcement monitoring workflows for the bio-harms area, and you will work closely with Policy, Threat Intelligence, Data Science, and Engineering cross-functional partners to accomplish tasks at scale. Safety is core to our mission, and your work will directly protect individuals, communities, and critical systems. Important context for the role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including material of a sexual, violent, or psychologically disturbing nature. The role also carries a shared on-call responsibility across the Policy and Enforcement teams. Key responsibilities Enforce Usage Policies with a specific focus on detecting and mitigating potential bio risks and harmful use of AI systems. Take ownership of enforcement monitoring workflows for the bio-harms area, improving end-

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enforcement Analyst focused on Chem & Explosives Harms, you will play a critical role in protecting against the misuse of AI systems for chemical and explosives harms. You will enforce our Usage Policy with a specific focus on detecting and mitigating these risks, investigating potential violations, and help continuously strengthen our safeguards. The work sits at the intersection of chemical and explosives threat analysis and platform enforcement: you will read real model interactions and make fast, well-reasoned calls about whether activity is benign research or a credible attempt at harm. This role is a fit for someone who understands the dual-use nature of chemistry and explosives technologies well enough to separate the benign from the malicious — and who acts decisively under ambiguity. You will own and continuously improve the enforcement monitoring workflows for this harm area, and you will work closely with Policy, Threat Intelligence, Data Science, and Engineering matrix partners to accomplish tasks at scale. Safety is core to our mission, and your work will directly protect individuals, communities, and critical systems from AI-facilitated weapons harm. Important context for the role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including material of a sexual, violent, or psychologically disturbing nature. The role also carries a shared on-call responsibility across the Policy and Enforcement teams. Key responsibilities Enforce Usage Policies with a specific focus on detecting and mitigating potential chemical and explosives risks and harmful us

About the Team OpenAI’s Security organization exists to enable safe, responsible innovation at scale. As our systems, infrastructure, and research footprint grow, we invest deeply in world-class security capabilities that protect our people, products, and users without slowing progress. This organization safeguards OpenAI’s environments by building advanced detection systems, driving real-time response capabilities, scaling telemetry and logging infrastructure, and delivering actionable threat intelligence to stay ahead of adversaries. About the Role We are seeking a Global Detection and Response Lead to own and scale OpenAI’s cybersecurity detection and response operations. In this role, you will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvements across our global infrastructure. You will be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor high-performing teams, partner closely with Infrastructure, Research, Product Security, Enterprise Security, IT, and Engineering, and ensure that detection and response capabilities are embedded by design into the systems that power OpenAI. This is a strategic and practical leadership role requiring deep technical credibility, operational rigor, and the ability to build high-performing teams in a fast-moving environment. In this role, you will: Oversee global detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. Lead, mentor, and directly manage several small teams of senior engineers across observability, detection and response, and threat intelligence. Hire and scale these functions deliberately and proportionately as OpenAI’s compute footprint and platform ambitions grow. Ensure world-class operational rigor and readiness through management of incident playbooks

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. CLEAR is seeking a Senior Security Operations Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you. What you'll do: Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis Continuously evaluate CLEAR’s detection coverage against the evolving t

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About Anthropic Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role A large and growing share of Claude usage reaches customers through our cloud partners — Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundry. These surfaces require bespoke solutions so our approaches have to be designed for third-party distribution from the start. In this role you will own how Anthropic's model safeguards, fraud defenses, and compliance posture show up on every cloud. Responsibilities: Model Safety Across Clouds Own the multi-cloud strategy and roadmap for our safeguards — data retention, automated review, human review, and enforcement — designed to fit each partner's operating model Design product experiences and operations paths for managing eligibility criteria, verification paths, and the controls attached to differentiated capabilities for higher-trust organizations Build threat-intelligence sharing with AWS, Google, and Microsoft so misuse is detected and acted on consistently across surfaces Drive our transparency commitments to customers and partners on data access, review, and enforcement Fraud & Abuse Own fraud and abuse defenses for partner-sold offerings: bot and mass-registration abuse, pre- and post-sale risk controls, and chargebacks where the partner owns billing Define the fraud signals we exchange with each cloud partner and turn th

About the Team We are a small and fast-moving partnerships team that shapes and executes OpenAI’s most important collaborations. Your mission is to build and grow partnerships across the cybersecurity ecosystem. Reporting to the Cybersecurity Partnerships Lead, you will own a portfolio of cybersecurity technology partners and help them validate, launch, and scale solutions powered by OpenAI models and platforms. About the Role You are an experienced partnerships operator who combines business development, partner management, technical curiosity, and strong execution. You can manage external relationships while driving detailed cross-functional work across product, engineering, technical success, sales, marketing, legal, security, and operations. You move with urgency, follow through consistently, and are comfortable managing a portfolio in a fast-changing market. In this role, you will: Source, close and manage a portfolio of cybersecurity technology partners. Identify high-value use cases across security operations, identity, cloud security, application security, threat intelligence, governance, risk, and compliance. Develop partner plans covering integration, launch, enablement, co-marketing, co-sell, and growth. Support partnership structuring and coordinate product, technical, commercial, legal, and security workstreams. Help partners move from concept and technical validation to production launch and scaled customer adoption. Run regular partner reviews, track commitments, resolve blockers, and identify expansion opportunities. Coordinate closely with product, engineering, technical success, sales, marketing, legal, security, and operations. Measure partner pipeline, launches, model adoption, consumption, customer outcomes, and partner health. You might thrive in this role if you have: 8+ years of experience in partnerships, business development, alliances, partner success, or ecosystem roles. Experience in cybersecurity, enterprise software, cloud platforms, o

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As a Safeguards Enforcement Analyst on the account abuse team, you'll build and execute enforcement workflows that keep our products safe, with a focus on detecting and mitigating potential harm. Your initial focus will be account compromise: Anthropic's enforcement systems have to distinguish customers whose accounts have been compromised from actors abusing the platform — and today those two populations can look identical in the data. Stolen credentials and leaked keys are a growing abuse vector, and the collateral damage from enforcement against them lands on legitimate users. You'll own this problem end to end: detection, revocation, user notification, remediation, and the criteria for restoring access — turning what is today ad hoc incident response into a scalable, repeatable program. This position may expand into broader areas of enforcement over time. Safety is core to our mission, and you'll help shape policy enforcement so that our users can safely interact with and build on top of our products in a harmless, helpful, and honest way. Key responsibilities Investigate credential-compromise incidents across first-party and third-party platforms, tracing actor behavior across accounts and surfaces Design and operate remediation workflows for compromised accounts: revocation, customer notification, and standards for restoring access Partner with Engineering and Data Science teams to improve how we separate compromised-customer traffic from willful abuse Enforce usage policies with a focus on detecting and mitigating potentially harmful use of AI systems Work with threat intelligence on emerging credential-abuse pat

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Security team is growing, and we're looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role, you'll build and scale the systems, processes, and tooling that help protect Figma and our community. You'll partner closely with Security Engineering, Platform Security, IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Own Figma's security monitoring and incident response program, from detection engineering through post-incident review and continuous improvement Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity Lead incident response preparedness initiatives, including tabletop exercises, red team engagements, and response capability assessments Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs Partner wi

Skeletons, lasers, tattoo buses — the Torq brand grabs attention like nothing else in cybersecurity. And we're growing like crazy, backed by Series D funding, 200% employee growth, and 300% revenue growth. Fueling Torq's momentum is our game-changing AI SOC platform, backed by a team and culture that makes Torq one of Forbes' Best Startup Employers in America, and a Business Insider 'startup to bet your career on'. Life at Torq is all gas, no brakes. We're a team of relentless, collaborative go-getters pushing the boundaries of what's possible for security automation. Every role is an essential driver of Torq's success as the AI-native autonomous SecOps platform of choice for security teams across the Fortune 500. About the Role We are looking for an AI-savvy Product Manager to join Torq as we continue expanding and exploring the hottest intersection in the security market: agentic AI and SecOps. The ideal candidate will have both experience in at least one SOC-adjacent domain (threat intelligence, SecOps, hunting, incident response…) and strong understanding of agentic AI. You’ll own parts of Torq’s agentic platform: where agents are managed, how they interact with users, and how they can help SOCs to reduce system-critical metrics and overall threat exposure. What You’ll Be Doing Lead critical parts of Torq’s agentic platform to help drive forward adoption and innovation across the full lifecycle - from UX to prompt engineering Become an expert in Torq’s AI SOC offering and in Torq’s Platform as a whole Represent the customer’s voice inside Torq to ensure we’re staying on the critical path Work closely with Torq’s top-notch engineering teams to deliver product capabilities and stay on top of state-of-the-art AI trends Analyze product data - from classic product analytics to AI evaluations of usage patterns - to proactively bubble up user needs or issues The Ideal Candidate Has 3-5 years of product management experience Possesses a strong understanding

Threat Hunter / Purple Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Mid-Level Threat Hunter / Purple Team Operator Job Type: Full Time Location: Remote with travel to customers and test locations as required Clearance Requirement: Active Top Secret with SCI eligibility Salary Range ; $115-$140K WHAT YOU'LL DO SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats that evade existing detection methods, develop and test hunting hypotheses, and feed findings back into detection engineering. This role will combine remote threat hunting and on-site purple team coordination in direct support of red team engagements to secure systems, strengthen the defenders, and build and validate detection methods that can catch offensive traffic in real time. This role requires comfort working independently through remote hunts as well as the ability to translate adversary tradecraft into defensive guidance. Responsibilities include: Conduct hypothesis-driven and intelligence-led threat hunts across endpoints, networks, and cloud telemetry for several weeks prior to each red team engagement. Analyze logs, alerts, and historical data for indicators of compromise (IOCs), anomalous behavior, and adversary TTPs mapped to the MITRE ATT&CK from partner-provided sources (EDR, SIEM, authentication/identify logs). Document hunt coverage and methodology, findings, detection recommendations, and any confirmed or suspected compromise, escalating immediately if active adversary activity is found. Deliver a threat hunt summary and determine if the customer environment is clear prior to red team assessments. Partner with