Threat intelligence and forensics jobs

894 open Threat intelligence and forensics roles at 444 companies in 51 countries and remote. 675 of them are open to candidates of any nationality; the rest ask for citizenship or a government security clearance. 19 mention relocation support.

Rebuilt 29 Oct 2026
open roles
894
companies
444
open to any nationality
76%
median stated pay
$135k

Companies hiring

CompanyOpen rolesAny nationalityRelocation
Peraton284%
Leidos195%
EY15100%
Nightwing140%
Control Risks14100%
Sophos13100%
Booz Allen Hamilton1331%
CrowdStrike13100%
Microsoft1191%
SpaceX100%
Google1090%
Charles River Associates9100%
Cypfer8100%
CACI International80%1
Parsons80%

Newest roles

Palo Alto Networks

paloaltonetworks.com
paloaltonetworks.com · HQ: Santa Clara, United States · Endpoint Security · Threat Intelligence · Security Operations · Cloud Security · Network Security · 1001-5000 employees · Est. 2005 · Trust B · Hiring 1127, 89 new
HQ: Santa Clara, United States · Endpoint Security · Threat Intelligence · Security Operations · Cloud Security · Network Security · 1001-5000 employees · Est. 2005 · Trust B · Hiring 1127, 89 new
Palo Alto Networks is a cybersecurity company headquartered in Santa Clara, California, selling next-generation firewalls and SASE network security, the Prisma and Cortex platforms for cloud security and security operations, and Unit 42 threat intelligence and incident response services. Founded in 2005 by Nir Zuk and listed on Nasdaq, it reports more than 16,000 employees and over 70,000 customers, with major engineering centres in Israel and India and offices across the Americas, Europe and Asia. It hires software engineers, product managers and designers, solutions consultants, account managers, go-to-market strategists and legal and sourcing staff.
No named decision-maker yet.
Careers mailbox is known
Verified live · 5 hours ago 1 day ago Likely open · 63%

Principal Consultant, Threat Intelligence Advisory (Unit 42)

≈ $48k – $124k per year (Estimated) · Lead · Dubai · Remote (United Arab Emirates) · Full-Time · Confidential · Principal · English
Red Teaming
Agentic Workflows
AI Agents
Cybersecurity
MITRE ATT&CK
Apply
Top 25% payVerified live · 5 hours ago 1 month ago Fading · 30%

Threat Hunting Researcher (Unit 42)

$117k – $189k per year · Equity · Middle · 3+ years exp · United States · Remote (United States) · Full-Time · Confidential · Middle · English
SQL
Python
Apply

Kordamentha

kordamentha.com
kordamentha.com · Sydney · Melbourne · Brisbane · Canberra · Auckland · Management Consulting · Financial Advisory, Valuation & Restructuring · 201-500 employees · Est. 2002 · Hiring 15, 7 new
Sydney · Melbourne · Brisbane · Canberra · Auckland · Management Consulting · Financial Advisory, Valuation & Restructuring · 201-500 employees · Est. 2002 · Hiring 15, 7 new
Discover how KordaMentha delivers outcomes that count — combining independence, expertise and action to create lasting impact.
No named decision-maker yet.
No careers mailbox known
Verified live · 3 hours ago 1 day ago Hiring now · 90%

Associate Director - Digital Forensics

≈ $82k – $199k per year (Estimated) · Head+ · 6+ years exp · In office (Auckland, New Zealand) · Full-Time · Middle · English
Apply
Verified live · 3 hours ago 1 day ago Hiring now · 90%

Associate - Digital Forensics

≈ $45k – $110k per year (Estimated) · Middle · 3+ years exp · In office (Auckland, New Zealand) · Full-Time · Middle · English
Apply

Recorded Future

recordedfuture.com
recordedfuture.com · HQ: Somerville, United States · Information Security · Threat Intelligence · 201-500 employees · Est. 2009 · Trust B · Hiring 50, 11 new
HQ: Somerville, United States · Information Security · Threat Intelligence · 201-500 employees · Est. 2009 · Trust B · Hiring 50, 11 new
Recorded Future is a cybersecurity intelligence company headquartered in Somerville, Massachusetts, and founded in 2009. The firm provides a comprehensive threat intelligence platform that uses automated data collection and analysis to identify cyber risks across the open, deep, and dark web. It operates on a global scale, serving thousands of enterprise and government clients with specialized modules for vulnerability management, fraud detection, and digital risk protection.
Christopher Ahlberg · Executive Officer, Director · decision-maker
Kevin Brown · Director
Jeff Fagnan · Director
Andy Palmer · Director
Careers mailbox is known
Top 25% payVerified live · 2 hours ago Visa sponsor 1 day ago Likely open · 63%

Threat Intelligence Analyst

$93k – $139k per year · Junior · 2+ years exp · In office (Washington, United States) · Master's Degree · Full-Time · Junior · Arabic (Optional)
YARA
Python
Databases
ElasticSearch
AI/ML
Human-in-the-Loop
DevOps
Kibana
TCP/IP
Cybersecurity
Shodan
Censys
Maltego
Diamond Model
Recorded Future
Snort
Suricata
YARA
+6
Apply

Sysco

sysco.com
sysco.com · HQ: Houston, United States · Food Logistics · Wholesale · 5000+ employees · Est. 1969 · Trust B · Hiring 1648, 112 new
HQ: Houston, United States · Food Logistics · Wholesale · 5000+ employees · Est. 1969 · Trust B · Hiring 1648, 112 new
Sysco is a foodservice distribution company headquartered in Houston, Texas, that sells and delivers food, kitchen supplies and related products to restaurants, healthcare facilities, schools, hotels and other foodservice operators. Founded in 1969 and listed on the New York Stock Exchange, it operates distribution centers across the United States, Canada, the UK, Ireland, France, Sweden, Mexico and Costa Rica, along with the Sygma Network chain-restaurant business and a technology center in Sri Lanka. It hires CDL delivery drivers, warehouse order selectors, maintenance technicians, sales consultants, culinary specialists, inventory and pricing analysts and finance staff.
No named decision-maker yet.
No careers mailbox known
Verified live · 3 hours ago Visa sponsor 1 day ago Likely open · 63%

Cyber Threat Hunting Analyst

≈ $126k – $240k per year (Estimated) · Senior · 8+ years exp · Hybrid (United States) · Bachelor's Degree · Full-Time · Staff · English
DNS
Azure
Cybersecurity
MITRE ATT&CK
SIEM
Apply

S&P Global

spglobal.com
spglobal.com · HQ: New York, United States · Financial Data & Market Intelligence · Credit Bureaus & Rating Agencies · 5000+ employees · Est. 1860 · NYSE: SPGI · Trust B · Hiring 249, 38 new
HQ: New York, United States · Financial Data & Market Intelligence · Credit Bureaus & Rating Agencies · 5000+ employees · Est. 1860 · NYSE: SPGI · Trust B · Hiring 249, 38 new
S&P Global is an American financial information company whose oldest predecessor was founded in 1860, and which took its present form through the 2022 merger with IHS Markit. Its most profitable business is the credit rating agency S&P Global Ratings, alongside market data and analytics through Market Intelligence, the index business behind the S&P 500, commodity price assessments through Platts, and Mobility, which owns the Carfax vehicle history service. Headquartered in New York and listed on the New York Stock Exchange, it earns most of its revenue from subscriptions and recurring fees rather than transaction-linked ratings work.
Eric Aboaf · Chief Financial Officer · decision-maker
Martina Cheung · President and Chief Executive Officer · decision-maker
Careers mailbox is known
Verified live · 8 hours ago 1 day ago Likely open · 63%

Cyber Threat Intelligence Analyst

≈ $11k – $27k per year (Estimated) · Middle · 3+ years exp · In office (Noida, India) · Bachelor's Degree · Full-Time · Middle
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Apply
Verified live · 8 hours ago Visa sponsor 8 days ago Likely open · 62%

Cyber Threat Intelligence US Lead

≈ $120k – $246k per year (Estimated) · Lead · 3+ years exp · In office (New York, United States) · Bachelor's Degree · Full-Time · Staff
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Apply

AS International

asinter-group.com
asinter-group.com · HQ: Paris, France · IT Consulting & Digital Transformation · Est. 1998 · Hiring 14, 9 new
HQ: Paris, France · IT Consulting & Digital Transformation · Est. 1998 · Hiring 14, 9 new
AS International is a French digital services company specialised in IT expertise, supporting large accounts in the transformation of their information systems. It places consultants with clients such as large financial groups, for example on IT and cyber risk analysis. The company is headquartered in Paris, France.
No named decision-maker yet.
Careers mailbox is known
≈ $60k – $97k per year (Estimated) · Senior · Hybrid (France) · Freelance · Senior
LLM
Cybersecurity
OpenCTI
Recorded Future
Apply

Skills these roles ask for

SIEM 231MITRE ATT&CK 211Python 199Windows 177Linux 154Splunk 100PowerShell 97AWS 94SQL 92Azure 81GCP 65Incident Management 62Crowdstrike 61Cyber Kill Chain 50TCP/IP 49FTK 48

Where the roles are

Washington 49New York 48London 40Arlington 40Bengaluru 28San Francisco 23Hyderabad 20Chicago 19Tel Aviv 16Boston 15

Security roles that fit you

Tell us your specialty once: new cybersecurity roles that fit it arrive in your matches every day.

Questions

Can a foreigner apply for these roles?

675 of the 894 roles here state no citizenship or security-clearance demand. A role that does says so in its advert, and the card marks it.

Which companies hire most cybersecurity specialists?

Peraton (28), Leidos (19), EY (15), Nightwing (14), Control Risks (14).

Which roles count as cybersecurity jobs?

Every role whose work is protecting systems and data - SOC and incident response, threat intelligence and forensics, application and cloud security, authorized penetration testing and vulnerability management, identity and access, governance, risk and compliance, security leadership - at any employer. A role is filed under a specialty when its title names one; a "Cybersecurity Engineer" that names none is a cybersecurity engineer's.

How fresh is this?

Every role is re-checked on the employer's own careers board at least every 48 hours, and the page is rebuilt every night.

Source: 894 live postings on employers' careers boardsUpdated 29 Oct 2026MethodologyJSONCC BY-SA 4.0