Threat Investigator Jobs

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. We are seeking a highly skilled Security Operations Engineer to support the expansion of a strategic security program focused on onboarding critical applications into enhanced monitoring capabilities.In this role, you will play a key part in building and optimizing SIEM detection capabilities, supporting threat verification, and enabling regulatory alignment with DORA (Digital Operational Resilience Act) requirements by the end of 2026. You will work at the intersection of SIEM engineering, threat modelling, and security operations , contributing directly to improving detection accuracy and strengthening overall security posture. Key Responsibilities: Detection Engineering: Design, build, and optimize SIEM detection rules (with a focus on Microsoft Sentinel) Testing & Automation: Develop and execute test cases for detection logic; automate validation processes using scripting Application Onboarding: Support onboarding of critical applications into the security monitoring ecosystem Requirements Gathering: Collaborate with application teams to define logging requirements and detection use cases Workshop Facilitation: Lead and moderate workshops with stakeholders to align on threat scenarios and security capabilities Technical Documentation: Produce clear and comprehensive documentation covering detection logic, threat models, and validation results Collaboration: Work closely with SOC, enginee

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 5+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Role Overview As a Sales Development Representative (SDR), you will play a key role in driving revenue growth by generating and nurturing high-quality Sales Accepted Leads (SALs). In this role, you will identify and engage prospective and existing customers, qualify opportunities, and schedule meetings for the sales team. This is an excellent opportunity to contribute to a mission-driven organization while building your career in the fast-paced cybersecurity industry. This position supports business operations within the United States and may be aligned to a U.S. territory across Eastern, Central, Mountain, or Pacific time zones. Work hours may be adjusted to match the business hours of the assigned territory. Key Responsibilities Lead Generation Identify, research, and target potential clients across designated industries and organizations Engage prospects through multiple channels, including phone, email, and social platforms Lead Qualification Conduct initial outreach and assess prospects based on defined qualification criteria (company size, needs, budget, timeline, etc.) Understand customer challenges

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Job Summary We are seeking a experienced Oracle DBA to manage and optimize our Oracle E-Business Suite 12.1.3 environment, with a roadmap to upgrade to 12.2 or migrate to Oracle Cloud. The ideal candidate will have deep expertise in Oracle database administration, EBS application support, and performance tuning, along with familiarity in tools like SharePlex and Hyperion. This role is critical to supporting financial closure cycles and ensuring database reliability and performance. Key Responsibilities: Administer and maintain Oracle EBS R12.1.3 environments, including patching, cloning, backups, and upgrades. Lead and support the upgrade path to Oracle EBS 12.2 or migration to Oracle Cloud Infrastructure (OCI). Support month-end, quarter-end, and year-end financial closure activities, ensuring system stability and performance. Perform database cloning for development, testing, and troubleshooting purposes. Troubleshoot and optimize SQL queries and PL/SQL code for performance and reliability. Monitor and optimize database performance, availability, and scalability. Manage concurrent managers, workflow serv

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . This is a Solution Engineering role typically is 70% office or remote working in the regional country you are aligned to, supporting sales and channel technical activities and up to 30% traveling. This role is aligned to someone who is a self-starter, passionate about technology, enabling teams and connecting with people to help solve their requirements. The ideal candidate must have proven hands-on experience in cyber security products, excellent communication, and presentations skills. This is a perfect opportunity for an individual with previous Pre-Sales, Support, or Professional Services proven experience at a Vendor, Channel, Customer or Distribution role, who is looking to have a balance of channel and technical sales activities and build trusted relationships with partners. Responsibilities Include Proactive leader of technical discovery conversations to qualify and validate the customer requirements and use cases to build out a bill of materials that meets the customer needs and aligns to the desired outcomes Conduct technical sales presentations, product, and solution demonstrations across SonicW

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Overview SonicWall is looking for a Senior Product Marketing Manager to own go-to-market strategy and execution for our Endpoint Detection and Response (EDR) and Threat Protection product lines, along with other assigned product lines across the SonicWall portfolio. This individual contributor role also drives the success of SonicWall's Technology Alliance Partner Program, ensuring partner value propositions and joint go-to-market plans translate into measurable pipeline and revenue impact. The role also maintains working knowledge of SonicWall SonicSentry, our Managed Security Services (MSS) business, to support consistent messaging and cross-functional alignment where the two offerings intersect. You will develop positioning and messaging, lead product launches, build the sales and channel enablement tools that win deals, and serve as the subject-matter expert who translates complex security technology into clear, compelling, customer-facing value. This role requires deep hands-on execution rather than team management — you will drive results directly, in close partnership with product management, engine

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . We are seeking an experienced Principal Software Engineer to lead the architecture, development, and evolution of a large-scale malware analysis and cybersecurity platform. This role will own the end-to-end technical architecture across Python-based analysis pipelines, message-driven job orchestration systems, Windows VM sandbox environments, and web-based interfaces. The ideal candidate brings deep expertise in software engineering, malware analysis, and distributed systems, with a proven ability to take ownership of complex legacy platforms and drive modernization initiatives. You will lead the design and implementation of advanced detection capabilities, including behavioral analysis, malware sandboxing, machine learning-based classification, and support for new file types, while ensuring platform scalability, reliability, and performance. This position requires strong hands-on development skills in Python with Linux-based production environments, messaging architectures such as RabbitMQ, virtualization technologies, and cloud-native deployment practices. As the technical leader for the platform,

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Requirements Tech / BE in Computer Science, Engineering, or a related field. 6+ years of professional software development experience with a strong focus on frontend development. Strong hands-on experience with js (Vue 3) . Strong proficiency in TypeScript and modern JavaScript (ES6+) . Proficient in HTML5, CSS3 , and responsive web development. Experience with state management libraries such as Pinia, Vuex . Experience integrating and consuming REST APIs . Good understanding of UI/UX principles , frontend architecture, and web performance optimization. Familiarity with component-based design and reusable UI development. Strong problem-solving skills with the ability to troubleshoot and resolve complex frontend issues. Experience with Git and modern development workflows. Self-motivated, well-organized, and a strong team player in a globally distributed setup. Excellent written and verbal communication skills. Preferred Skills Micro-frontend experience Experience with frontend testing frameworks such as Vitest, J

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Job Title: Distinguished Engineer - Data Architect Role Overview: We are looking for a Distinguished Engineer- Data Architect to design and build the data foundation for our AI-driven security platform. In this role, you will own the architectural blueprint and core implementation of our data strategy, transforming massive streams of high-velocity network traffic logs, customer configurations, and security alerts into high-performance, ML-ready data fabrics. As part of a lean, elite three-person Data & AI team, you will serve as the ultimate technical authority on data scale, streaming architecture, multi-tenant security, and cost-efficient storage systems. Key Responsibilities: Architect the Core Data Platform: Design, implement, and evolve a unified blueprint for streaming and batch data processing capable of ingesting, normalizing, and storing petabyte-scale, high-velocity security telemetry. Enable AI & Advanced Analytics: Partner directly with the Lead AI Engineer to architect the underlying storage, retrieval systems, and feature stores—including optimal vector database structures and data la

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Role Overview As our lead AI/ML Engineer , you will design, build, and scale the intelligence layer powering our next-generation security products. You will turn complex datasets—including configurations, security alerts, and raw network logs—into production-ready AI capabilities that drive automated analysis, reasoning, and intelligent recommendations. Key Responsibilities Architect AI Systems: Design and deploy robust Retrieval-Augmented Generation (RAG) pipelines, agentic workflows, and LLM applications tailored to parse and reason over security telemetry and unstructured logs. Model Development & Tuning : Train, fine-tune, and evaluate ML/DL models for pattern matching, anomaly detection, and classification across massive, heterogeneous security datasets. Ensure AI Trust & Alignment : Implement strict guardrails, evaluation frameworks, and safety alignment techniques to ensure all model outputs and recommendations are deterministic, safe, and highly accurate. Establish MLOps: Build and maintain scalable ML pipelines (from data preprocessing to model monitoring in production), collaborati

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Technical Architect: Company Description Okta is the leading independent identity partner. We enable organizations to securely connect the right people and technologies, providing identity solutions that protect workforce and customer identities across a rapidly evolving technology landscape. The P0 Threat Research organization operates at the intersection of adversary research, threat hunting, detection engineering, data science, and product innovation. Our mission is to understand modern adversaries better than anyone else and make that knowledge actionable for our customers and products. Position Description Architect, Threat Research will help define and drive the technical vision for Okta's threat research efforts. This role is focused on understanding how modern adversaries operate, developing new methodologies for discovering and analyzing attacker behavior, and translating that research into actionable outcomes for our customers and products. Initial areas of emphasis include identity, cloud, SaaS, AI, and other emerging technologies, but success in this role is rooted in deep threat research expertise and the ability to rapidly develop expertise in new technologies and attack surfaces. The Architect will serve as a senior technical leader within the Threat Research organization. This individual will work closely with threat researchers, threat hunters, detection engineers, data scientists, product teams, engineering teams, and other senior t

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. Our Communications team includes External Communications, Internal Communications, and other strategic communications functions. This team’s ethos is to support OpenAI’s mission and goals by clearly and authentically explaining our technology, values, and approach to safely building powerful AI. About the Role We’re looking for a senior communications leader to shape how OpenAI communicates about cybersecurity. This person will define the global narrative, lead communications for major product, research, and business milestones, and build sustained programs that explain how OpenAI is helping advance cyber defense while managing the risks created by increasingly capable models. The role will connect OpenAI’s work across cybersecurity products and capabilities, responsible deployment, threat intelligence, enterprise security, research, and public policy. You will work closely with Security, Product, Research, Preparedness, Safety, Global Affairs, Go-to-Market, Legal, and Marketing to anticipate opportunities and risks, develop coordinated communications, and build trust with security practitioners, customers, policymakers, and the public. This is both a strategic and hands-on role. The right person will be comfortable defining a long-term communications strategy, building the systems and relationships needed to execute it, and personally leading through major launches, technical disclosures, and fast-moving issues. This role reports to the Head of Communications, Business and is based in San Francisco, CA. We use a hybrid work model of 3 days per week in the office and offer relocation assistance. In this role, you will: Define and lead communications strategy for OpenAI’s cybersecurity work, from global narrative development through launches, research, threat reporting, and sustained storytelling. Build a clear, differentiated story about how OpenAI can

Lead OT Cybersecurity Engineer will spearhead the design, implementation and operations of cybersecurity controls across OT/ICS environments. This role acts as the technical authority for securing industrial automation systems, ensuring visibility, resilience, compliance and threat protection across plants and manufacturing operations. The position requires close collaboration with Plant Engineering, OEM vendors, IT Security teams, Cybersecurity team and SOC to strengthen OT cyber maturity, implement secure architectures and drive incident response readiness aligned with global standards (IEC 62443, NIST 800 82, ISO 27001, etc). Source: Adani Group | Job ID: 55796

APPLICATION AND WEB SECURITY SPECIALIST THE OPPORTUNITY The Application and Web Security Specialist will serve as a security consultant to Web and Application Developers. You will work with developers on identifying security risks within their applications and validating remediation. This role offers the opportunity to build solid relationships throughout the enterprise, with developers and vendors, while learning about the various technologies employed within our organization. There are other opportunities to serve included with this role that relate to other Security disciplines such as Threat Security, Vulnerability Management, and Event Correlation. THE TEAM The Information Security Team is responsible for the confidentiality of customer and employee information, ensuring the data stored and shared maintains integrity, all while making sure that all of this does not impact the availability of the entire Dillard’s enterprise. This team is expected to be high-performing. To meet this expectation, the team members are communicative and collaborative, always sharing knowledge and research. Members of this team should be able to understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and you enjoy working alongside others who set the same standard and who genuinely want each of their peers to succeed, you may be the perfect addition to this team. WHAT YOU WILL DO Inspect and assess current solutions for Web and Application Security risks Architect and implement security controls within the Software Development Lifecycle (SDLC) Hold recurring cadences with development and security leadership to discuss findings and future paths for the company regarding application security posture Participate in vulnerability verification and assist development teams in remediation based on reports from scanners, along with manual application sec

Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US. As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations. Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow. Location: Europe remote or London hybrid About the role: As our engineering and research organisation grows, so does the complexity of securing it. Our Application Security team is at the forefront of that challenge — building AI-native security tooling, embedding security into the development lifecycle at scale, and finding ways to make a small, highly capable team punch well above its weight. We're looking for an Engineering Manager to lead and grow the AppSec team. This is not a coordination role. You'll be leading a team of exceptionally senior and staff-level engineers who are deeply self-directed and technically excellent. To earn their trust and enable their best work, you'll need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You'll also own AppSec strategy and be accountable for how the function scales alongside a product organisation that is growing fast and leaning heavily into AI-assisted development. Important note: Anyone working as a manager within the Infosec team will need to follow the Infosec Team Management Tenets . Key Responsibilities: Lead, support, enable and grow the AppSec team — owning hirin