Senior Threat Intelligence Solutions Engineer, Anomali
$140-160k
Intelligence powered security operations
Be an early applicant
Intelligence powered security operations
201-500 employees
Be an early applicant
$140-160k
201-500 employees
Company mission
To deliver innovative and effective technologies and solutions to address cyber security challenges for organizations of all sizes.
Role
Who you are
- Bachelor's degree in Computer Science or an additional 3 years of relevant experience in lieu of degree
- Minimum of 5 years of experience and expertise in broad cyber threat intelligence, detection engineering and identifying emerging threats or trends, along with query design and automation
- Strong understanding of attacker tactics, techniques, and procedures (TTPs) across multiple threat domains
- Hands-on expertise developing threat detections using query languages, rules engines, or behavioral analytics and collaborating internally to automate / operationalize them
- Proven ability to conduct and communicate original threat research and experience publishing high quality intelligence products
- Excellent written and verbal communication skills, including customer-facing presentations
- Experience engaging directly with enterprise security teams and executive stakeholders as an advisor on threat modeling, detection strategy, and intelligence-driven security improvements
- Prior experience as a practitioner within the US intelligence community
- Openness to coaching and a proactive approach to training/feedback
- Self-motivated, displaying a robust work ethic
- Willingness to travel up to 10%
- This position is not eligible for employment visa sponsorship. The successful candidate must not now, or in the future, require visa sponsorship to work in the US
What the job involves
- The Senior Threat Intelligence Solutions Engineer is a hybrid technical role responsible for conducting novel threat research, transforming intelligence into actionable detections and engineering outcomes, and serving as a trusted asset to customers
- This individual operates at the intersection of intelligence analysis, detection engineering, and professional services—bridging research findings with real-world security operations and customer environments. The role requires deep expertise in adversary tradecraft, strong engineering skills, and the ability to clearly communicate complex threats to both technical and executive audiences
- Conduct original, in-depth threat research on advanced adversaries, emerging malware, attack techniques, and evolving TTPs
- Analyze attacker behavior across the kill chain, including infrastructure, tooling, operational security, and monetization models
- Contribute to strategic and tactical understanding of threat actor campaigns and trends
- Author and publish high-quality intelligence products for the customer community
- Translate research into clear, consumable outputs for defenders, SOC teams, and executive stakeholders
- Participate in public-facing thought leadership as appropriate (blogs, briefings, webinars, or conference content)
- Design, develop, and maintain high-fidelity detections aligned to adversary behaviors and techniques
- Validate detections against real-world attack data and ensure operational effectiveness with minimal false positives
- Collaborate with engineering and product teams to operationalize intelligence into platform capabilities
- Serve as a customer-facing technical expert, providing intelligence products, detection engineering and otherwise augmenting their capabilities
- Advise customers on threat modeling, detection strategy, and intelligence-driven security improvements
- Build trusted relationships with customers by delivering credible, actionable, and timely products and services
- Partner closely with product managers, engineers, customer support, and customer success teams to improve customer outcomes and product quality
- Mentor junior analysts and engineers, providing guidance on research methods, detection development, and analytical rigor
- Help shape threat intelligence strategy, research priorities, and best practices across the organization
Our take
The demand for cybersecurity services continues to grow as cyberthreats remain a serious problem for digital security, increasing the need for enterprise threat intelligence solutions.
Anomali provides automated cybersecurity solutions that use metrics to analyse exactly what a security package does, how it responds and what breaches it can prevent. This allows businesses to receive advice and analytics on their current cybersecurity systems, aiming to reduce spending on unnecessary software and support low-budget cybersecurity.
Anomali presents itself as a unique cybersecurity solution by focusing on collecting and analysing intelligence based on the success of existing security platforms. This is strengthened by comparing data to other companies and the number of breaches it has prevented. In 2024, Anomali launched its AI-powered Security Operations Platform, saving time for analysts by up to 50% through an AI co-pilot. This exemplifies Anomali's keen eye for forward momentum in product development.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Jan 2018
$40m
SERIES D
Apr 2016
$30m
SERIES C
Total funding: $96.3m
Company benefits
- Medical coverage
- Prescription drug coverage
- Dental coverage
- Vision coverage
- Short-term and long-term disability
- Life insurance (2x annual salary) and AD&D coverage
- 401K retirement plan
- 10 Paid Federal Holidays
- Unlimited Flexible Time Off (FTO) in the United States. Time Off outside of the United States will follow country specific guidelines
- Volunteer time off (2 days)
- Company-provided refreshments at HQ
- Quarterly events with your geographic team
Company HQ
Centennial, Redwood City, CA
Leadership
Ahmed Rubaie
( CEO)Ahmed, has more than three decades of global technology leadership experience. In prior roles, they have driven strategic expansion and diversification of businesses across markets, industries and customers, steering delivery of leading and differentiated solutions. Ahmed has overseen the successful execution of growth transformation, including at Ariba (NASDAQ: ARBA), where they helped the company emerge from the 2008 recession to become the second most valuable Software-as-a-Service company by 2012
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at Anomali