Security Engineer - Threat Intelligence Job at Randstad (Edmonton)

Senior Security Engineer, Threat Intelligence

As a Senior Security Engineer specializing in Threat Intelligence on the Detecti...

Location

United States; Canada

Salary:

156000.00 - 210000.00 USD; CAD / Year

1Password

Expiration Date

Until further notice

Requirements

5+ years of experience in technical security engineering roles
3+ years focused on threat intelligence
Strong understanding of modern attacker TTPs, including cloud-native, SaaS, identity-focused, and insider-adjacent threat patterns
Experience developing intelligence requirements, prioritization frameworks, analysis workflows, and emulation scenarios
Hands-on experience with scripting or automation (e.g., Python, APIs, SOAR workflows) to improve operational efficiency and cross-team execution
Ability to produce concise, high-quality written intelligence, including executive-level summaries
Familiarity with security telemetry, logs, and investigative workflows used by detection and response teams
Willingness to participate in an on-call rotation and support security incidents during high-severity or off-hours events

Job Responsibility

Research, track, and assess the threat landscape by analyzing relevant threat actors, campaigns, and behaviors affecting 1Password’s attack surface, identity systems, brand, third-party ecosystem, and insider risk scenarios
Analyze and prioritize information to develop actionable intelligence that informs detection coverage, hunting activities, and response readiness
Partner with Detection Engineering to design and validate threat-based detections, including through adversary emulation, simulation, or controlled testing
Use automation and scripting to improve how threat intelligence is collected, enriched, distributed, and actioned across Security workflows
Curate and deliver threat intelligence reporting for both technical teams and executive stakeholders
Build and maintain repeatable threat intelligence processes, workflows, and documentation that scale with the Detection & Response program
Participate directly in security operations by triaging alerts, supporting investigations, managing incidents, and contributing to post-incident learning

What we offer

Health benefits
Dental benefits
401k/RRSP
Generous paid time off
Equity grant
Participation in incentive programs
Maternity and parental leave top-up programs
RSU program for most employees
Retirement matching program
Free 1Password account

Fulltime

Security Engineer - IR Threat Intelligence

Meta Security is looking for a threat intelligence investigator with extensive e...

Location

United States , Bellevue

Salary:

154000.00 - 217000.00 USD / Year

Senior Cyber Threat Intelligence Engineer

As a Senior Cyber Threat Intelligence Engineer, you will function as a deeply te...

Location

United States , Chevy Chase; Palo Alto; Seattle

Salary:

105000.00 - 215000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

7+ years of experience in cyber threat intelligence, threat hunting, security operations, or a related cybersecurity discipline
Demonstrated hands-on experience conducting threat hunting in enterprise environments
Strong coding or scripting experience with the ability to design and maintain custom tools
Proven experience applying adversary frameworks such as MITRE ATT&CK to real-world detection and analysis
Experience producing written intelligence products that inform technical teams and leadership
Deep understanding of attacker techniques, intrusion workflows, malware, and phishing operations
Experience working with SIEM, EDR, and threat intelligence platforms
Ability to work independently, manage competing priorities, and deliver results under time constraints

Job Responsibility

Analyze and assess advanced cyber threats, adversary behavior, tooling, and campaigns relevant to GEICO
Develop and execute intelligence-informed threat-hunting hypotheses using endpoint, network, and cloud telemetry
Build, maintain, and enhance custom tools, scripts, and automation to support intelligence analysis and hunting workflows
Use programming and scripting languages (e.g., Python, PowerShell, Bash, or similar) to analyze data, enrich intelligence, and automate manual processes
Translate threat intelligence into actionable detection logic, investigative guidance, and response context
Produce clear, well-structured written intelligence products, including assessments, briefings, and reports for both technical and non-technical audiences
Support active investigations by providing timely adversary context during incidents
Track emerging threats, vulnerabilities, and adversary trends, prioritizing relevance and impact
Continuously improve analytic tradecraft, tooling, and processes to increase effectiveness and efficiency

What we offer

Comprehensive Total Rewards program
401K savings plan with 6% match
Performance and recognition-based incentives
Tuition assistance
Mental healthcare
Fertility and adoption assistance
Workplace flexibility
GEICO Flex program (work from anywhere in the US for up to four weeks per year)

Fulltime

Staff Security Analyst, Threat Intelligence

We are building an elite team, applying frontier technologies to the world’s big...

Location

United States , Menlo Park

Salary:

191000.00 - 225000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations
Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis
Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods
Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows
Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication
Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations

Job Responsibility

Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm
Build and operationalize a comprehensive "Universe of Threats" by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse
Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations
Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections
Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale
Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting
Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk

What we offer

Challenging, high-impact work to grow your career
Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more
Exceptional office experience with catered meals, events, and comfortable workspaces

Fulltime

Information Security Engineer – Cyber Threat Detection & Response

Ryanair Labs are currently recruiting for a Information Security Engineer – Cybe...

Location

Poland , Wroclaw

Salary:

Not provided

Ryanair - Europe's Favourite Airline

Expiration Date

Until further notice

Requirements

6+ years in SOC, IR, or threat detection roles
Hands-on experience with SIEM (e.g., Microsoft Sentinel, Splunk), EDR (e.g., Defender, CrowdStrike)
Experience with Azure/AWS cloud security logs and detection use cases
Practical knowledge of MITRE ATT&CK
Ability to produce meaningful metrics and dashboards (e.g., Sentinel Workbooks, Power BI, Kibana)
Strong scripting skills (Python, PowerShell)
Clear communication skills across technical and non-technical stakeholders

Job Responsibility

Develop and tune threat detection rules across SIEM, EDR, and cloud environments
Lead containment, eradication, and recovery efforts for cyber incidents
Create and maintain dashboards to track KPIs such as MTTD, MTTR, detection coverage, and investigation volume
Perform threat hunting based on current threat intelligence and adversary TTPs
Automate alert enrichment, triage, and response workflows using SOAR or scripting (Python/PowerShell)
Collaborate with IT, cloud, and compliance teams to enhance detection quality and response readiness
Contribute to documentation, playbooks, and continuous process improvement

What we offer

Contract of employment (permanent after trial period)
Hybrid home office (2 days per week from the office, 3 days remote)
Discounted and unlimited travel to over 250 destinations
Multisport card
Private health care
Group insurance scheme
Possibility to take part in conferences, training and courses
Office located in the city center with a view for an Old Market Square
Annual events (i.e. St. Patrick’s Day)
Regular social meetings

Fulltime

Senior Security Research - MSTIC Threat Intelligence

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...

Location

Israel , Multiple Locations

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

You have at least 6 years of experience producing actionable threat intelligence on targeted and advanced persistent threats, with demonstrable impact on network and host defenses
Proven expertise tracking and investigating APT adversaries, across all stages of the attack chain
Strong ability to analyze and hunt adversary behaviour end-to-end, map attack chains, and communicate clear, evidence-based intelligence to technical and executive audiences
Ability to quickly adapt to a rapidly evolving telemetry landscape

Job Responsibility

As a threat intelligence analyst, you will be responsible for tracking sophisticated adversaries and use your technical knowledge of adversary capabilities, infrastructure, and techniques
You will define, develop, and implement techniques to discover and track current adversaries and identify the attacks of tomorrow
You will produce actionable intelligence, proactively drive hunting and detection capabilities, and contribute to the disruption of adversary activity to protect Microsoft and its customers
In this role, you will collaborate closely with MSTIC and partner with security, engineering, and product teams across Microsoft to protect Microsoft assets, products, and customer environments
You will strengthen existing partnerships and build new ones with key organizations to enhance collective defense and improve product and service security

Fulltime

Security Research II - MSTIC Threat Intelligence

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions t...

Location

Israel , Multiple Locations

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

3+ years producing actionable threat intelligence on targeted and advanced persistent threats
proven expertise tracking and investigating APT adversaries
strong ability to analyze and hunt adversary behavior end-to-end, map attack chains, and communicate clear, evidence-based intelligence
ability to quickly adapt to a rapidly evolving telemetry landscape

Job Responsibility

Tracking sophisticated adversaries and using technical knowledge of adversary capabilities, infrastructure, and techniques
defining, developing, and implementing techniques to discover and track current adversaries and identify the attacks of tomorrow
producing actionable intelligence, proactively driving hunting and detection capabilities, and contributing to the disruption of adversary activity
collaborating closely with MSTIC and partnering with security, engineering, and product teams across Microsoft
strengthening existing partnerships and building new ones with key organizations

Fulltime

Security Engineer Investigator, Integrity Investigations, Intelligence, and Events

The Integrity, Investigations, Intelligence and Events (i3E) teams at Meta are d...

Location

United States , Menlo Park

Salary:

184000.00 - 257000.00 USD / Year

Select Country

Security Engineer - Threat Intelligence

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?