Threat Intelligence Remote

Remote Threat Intelligence Cybersecurity Jobs

12 jobs found

Include remote jobs

All (343) 🌍 Worldwide (52) 🇺🇸 US (287) 📍 Location-specific (4)

1mo ago

Cybersecurity Threat Hunter

Binary Defense Houston, TX 🇺🇸 Remote

Houston, TX

1mo ago Closed

Full time Crowdstrike Cyber Investigation Endpoint Security

This position is no longer accepting applications (closed Sep 7, 2026).

Job Description

Binary Defense is hiring a Threat Hunter in Houston, TX (remote) to track attacker techniques and translate intelligence into actionable detection and client threat hunts.

Responsibilities

Monitor emerging threat actor techniques using breaking research, threat intelligence reporting, and firsthand observation, then evaluate relevance to client environments
Conduct original research from observed malware and threat actor TTPs, including extracting IOCs and identifying detection opportunities
Build and tune client-facing threat hunts as queries across customer EDR and SIEM platforms
Act as a technical point of contact for clients by communicating hunt findings, methodology, and recommendations to improve security posture
Perform static and dynamic malware analysis to understand malicious behavior, execution flow, and common evasion techniques
Review telemetry, logs, and alerts to identify suspicious behavior across Windows, Linux, and macOS
Collaborate with Threat Hunters and SOC analysts to support investigations and deliver technical findings
Stay current on the latest threat actor techniques and cybersecurity developments affecting client networks
Support and mentor less experienced team members as the role grows

Requirements

Hands-on threat hunting experience using EDR and/or SIEM platforms such as Microsoft Sentinel, Splunk, and CrowdStrike
Ability to build and tune hunting and detection queries using platform-native query languages (for example KQL and SPL)
Strong written and verbal communication to explain technical findings clearly to clients and teammates
Working knowledge of threat actor techniques, defense evasion, and the current threat landscape
Experience converting threat intelligence into deployable hunt and detection logic
Familiarity with malware analysis techniques and the ability to interpret and apply results
Network traffic analysis experience
Experience with Windows environments, with working familiarity across Linux and macOS
Strong research and technical analysis skills, with problem-solving, interpersonal, organizational strengths, and attention to detail
Associate’s degree in Computer Science, Information Security, Incident Response, Forensics, or a related field (or 2+ years hands-on experience)

Technologies

Microsoft Defender, Microsoft Sentinel, Splunk, CrowdStrike
EDR, SIEM
KQL, SPL
PowerShell, VBA, JavaScript, .NET, Python, Bash

Benefits

Competitive medical, dental, and vision coverage for employees and dependents
401k match which vests every payroll
Flexible and remote-friendly work environment
Training opportunities to expand your skill set

Preferred Qualifications

Bachelor’s or master’s degree in computer science or Cybersecurity (or 4+ years hands-on experience)
2+ years of experience in threat hunting, detection engineering, incident response, or a SOC role
Experience analyzing or de-obfuscating scripts (PowerShell, VBA, JavaScript, .NET, and similar)
Scripting or programming experience (for example Python, PowerShell, or Bash) to support analysis and internal tooling
Experience publishing original research through blog posts, public reporting, or conference talks
Malware reverse engineering experience (static and dynamic)
Digital forensics and incident response experience
Experience mentoring other analysts

View full job page →

1mo ago

Principal Threat Intelligence Engineer

UnitedHealth Group Washington, DC 🇺🇸 Remote

Washington, DC

1mo ago Closed

$113k - $193k/yr Full time Agentic Ai Artificial Intelligence Cybersecurity Tools

This position is no longer accepting applications (closed Sep 5, 2026).

Job Description

UnitedHealth Group is looking for a Principal Threat Intelligence Engineer (remote in Washington, DC) to deploy and integrate threat intelligence capabilities across its security ecosystem. In this role, you will help turn threat data into actionable intelligence by building the pipelines, workflows, and integrations that support CTI, SOC, IR, and other SecOps teams.

This position supports a modern approach to intelligence operations, combining threat intelligence platforms, SIEM enrichment, and automation (including agentic AI and LLM-enabled capabilities) to increase the speed and availability of contextualized intelligence. The goal is to reduce manual effort while improving detection fidelity across security tooling.

Responsibilities

Deploy, integrate, and maintain a threat intelligence platform integrated into United Health’s security tooling ecosystem
Integrate threat intelligence into SIEM platforms (for example, Splunk) to support detection use cases and alert enrichment
Use agentic AI, LLMs, and related capabilities to improve availability and speed of delivery of contextualized threat intelligence for CTI, SOC, IR, and other SecOps members
Build and deploy technology-supported workflows for intelligence use cases across SOC, IR, Insider Risk, Fraud, Red Team, and Threat Hunt environments
Develop and maintain SOAR playbooks for automated threat response and enrichment, using SOAR to optimize intelligence workflows
Orchestrate workflows across security tools to reduce manual analysis and response time
Build and maintain integrations between threat intelligence feeds (commercial, open-source, ISACs) and internal security platforms
Integrate and operationalize TIPs such as MISP, OpenCTI ThreatConnect, Anomali, and ThreatQuotient with enterprise security tools
Develop pipelines to ingest, normalize, deduplicate, and enrich Indicators of Compromise (IOCs) and threat data
Correlate intelligence with telemetry from SIEM, EDR, NDR, and cloud security tools to improve detection fidelity
Enable automated enrichment of alerts using threat intelligence data within SIEM workflows

Requirements

3+ years of experience in a cyber threat intelligence, cyber security engineering, incident response, or malware analysis role, with heavy emphasis on tool and technology integration
Proficiency in one or more of: Python (primary) for automation, API integrations, and data processing
Proficiency in one or more of: Java, JavaScript/Node.js, or Go for service development
Experience with REST APIs, JSON, and STIX/TAXII protocols
Experience with data parsing, transformation, and pipeline development
Experience with scripting (Bash, PowerShell)
Demonstrated familiarity with Git and CI/CD pipelines
Demonstrated familiarity with operating systems and platforms including Linux (Ubuntu, CentOS, RHEL, Kali), AWS, Docker, Windows Server (NT through 2012), Active Directory, and Mac OS X
Experience applying AI in a threat intelligence framework, including LLM, MCP server configuration, RAG, and associated processes
Hands-on experience with TIPs such as MISP, OpenCTI, ThreatConnect, and Anomali
Experience integrating multiple intelligence feeds and formats
Solid experience with SIEM platforms: Splunk, Microsoft Sentinel, IBM QRadar, Elastic
Experience building detection rules, correlation searches, and dashboards
Proven understanding of log ingestion, normalization, and enrichment pipelines
Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, and Tines
Development experience with playbooks/runbooks for automated response
Proven knowledge of structured threat data formats (STIX, TAXII)

Benefits

Comprehensive benefits package
Incentive and recognition programs
Equity stock purchase
401k contribution (all benefits subject to eligibility requirements)

Preferred Qualifications

Relevant certifications (for example, GCTI, GCIA, CISSP, Splunk certifications)
Experience in large-scale security operations or SOC environments
Familiarity with MITRE ATT&CK and other intelligence frameworks
Familiarity with data engineering technologies such as Kafka, Spark, Elasticsearch
Experience with cloud platforms (AWS, Azure, GCP) and security integrations
Experience in threat hunting and detection engineering

View full job page →

1mo ago

Cybersecurity Technical Writer - AI Trainer

DataAnnotation New York, NY 🇺🇸 Remote

New York, NY

1mo ago Closed

$50 - $100/hr Contract Adversarial Ai Ai Trainer Ai Training

This position is no longer accepting applications (closed Aug 15, 2026).

Job Description

DataAnnotation is seeking a Cybersecurity Technical Writer - AI Trainer to help shape how AI models understand and respond to security threats. In this contract role, you will evaluate AI-generated security content, tackle technical security problems, and provide feedback that steers the reasoning of AI systems toward real world threat awareness. The position offers a fully remote setup with a flexible schedule and is anchored in New York, NY.

Responsibilities

Evaluate AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, for real-world accuracy and validity.
Design and solve security-focused technical problems used to train AI systems.
Write clear technical explanations and security-relevant code.
Provide feedback that directly shapes the next generation of AI security models.

Requirements

2+ years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.
Some coding experience is required; comfort navigating and patching a codebase is key.
Fluency in English (native or bilingual level) with strong writing skills.
A bachelor's degree is preferred.
Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose which projects you take on and when you work, on your own computer, from the comfort of your home.
Competitive pay: projects are paid hourly at $50 to $100 USD per hour. Higher bonus rates may apply for certain projects.
Impact: help shape the future of AI technologies built for cybersecurity.

Advantages of contracting with us

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose which projects you take on and when you work, on your own computer, from your home.
Competitive pay: projects are paid hourly at $50 to $100 USD per hour. Higher bonus rates may apply for certain projects.
Impact: help shape the future of AI technologies built for cybersecurity.

Note

Payment is made via PayPal. We will never ask for money from you. This job is only available to applicants located in the United States, Canada, the United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

1mo ago

Information Security Analyst - AI Trainer

DataAnnotation St. Louis, MO 🇺🇸 Remote

St. Louis, MO

1mo ago Closed

$50 - $100/hr Contract Ai Security Ai Training Analyst

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

DataAnnotation offers a fully remote, contract role with flexible scheduling and a meaningful opportunity to influence the future of AI security. You will help train AI security models by evaluating AI-generated content, solving security challenges, and providing feedback to shape next generation systems. This position supports remote work and accommodates diverse schedules while aligning with regional eligibility.

Location: St. Louis, MO (remote).

Job type: Contract

Benefits

Fully remote: work from anywhere in the United States, Canada, United Kingdom, Ireland, Australia, and New Zealand.
Flexible schedule: select projects and set your hours from your own computer, at home.
Competitive pay: hourly rates range from $50 to $100, with opportunities for higher bonus rates on certain projects.
Impact: help shape AI technologies built for cybersecurity and influence how these systems respond to real world threats.

Responsibilities

Assess AI-generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security material, for real world accuracy and validity.
Design and solve security oriented technical problems used to train AI systems.
Produce clear technical explanations and security relevant code.
Provide actionable feedback that informs the next generation of AI security models.

Requirements

2+ years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience is required; comfort navigating and patching a codebase is essential.
Fluency in English with strong writing skills.
Bachelor's degree preferred.
Cybersecurity certifications are a plus (for example OSCP, CRTO, GREM, GCFA, CEH, and similar).

Note

Payment is made via PayPal. We will never ask for money from you. This role is available to candidates in the United States, Canada, United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

1mo ago

Cybersecurity Technical Writer - AI Trainer

DataAnnotation Maine 🇺🇸 Remote

Maine

1mo ago Closed

$50 - $100/hr Contract Ai Security Ai Trainer Ai Training

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

DataAnnotation is seeking a remote Cybersecurity Technical Writer and AI Trainer to help shape secure AI content. The role is based remotely in Maine and focuses on evaluating AI-generated security material, crafting training challenges, and delivering actionable feedback to improve AI security models. This contract position blends hands-on cybersecurity work with technical writing to support the next generation of AI-enabled defense tools.

Responsibilities

Assess AI-produced cybersecurity materials, covering threat analyses, vulnerability assessments, and offensive security techniques, for accuracy and real-world applicability.
Design and solve security-focused technical problems used to train AI systems.
Write clear technical explanations and security-relevant code.
Provide feedback that directly shapes the next generation of AI security models.

Requirements

At least two years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience is required; comfort navigating and patching a codebase is essential.
Fluent English with strong writing skills (native or bilingual level).
A bachelor's degree is preferred.
Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select projects and set your own hours from your own computer at home.
Competitive pay: hourly projects, up to $60 USD per hour, with opportunities for higher bonus rates on certain projects.
Impact: contribute to shaping the future of AI technologies built for cybersecurity.

Note: Payment is processed via PayPal. We will never ask for money from you. This opportunity is limited to candidates located in the United States, Canada, United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

1mo ago

Cybersecurity Analyst - AI Trainer

DataAnnotation West Virginia 🇺🇸 Remote

West Virginia

1mo ago Closed

$50 - $100/hr Contract Ai Security Ai Trainer Analyst

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

DataAnnotation is seeking a remote Cybersecurity Analyst - AI Trainer to evaluate AI-generated cybersecurity content, design security-focused training challenges, and deliver feedback that helps shape the next generation of AI security models. This contract role is based in West Virginia with remote work options and offers an hourly rate between $50 and $100. A minimum of two years of hands-on cybersecurity experience is required, and a bachelor’s degree is preferred.

Responsibilities

Assess AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, for real-world accuracy and validity.
Design and solve security-focused technical problems used to train AI systems.
Write clear technical explanations and security-relevant code.
Provide feedback that informs the next generation of AI security models.

Requirements

2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.
Some coding experience is required; comfort navigating and patching a codebase is key.
Fluency in English with strong writing skills (native or bilingual level).
A bachelor’s degree is preferred.
Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose projects and hours, using your own computer from home.
Competitive pay: hourly rate up to $60, with opportunities for higher bonus rates on select projects.
Impact: contribute to shaping AI technologies built for cybersecurity.

View full job page →

1mo ago

Penetration Tester (Ethical Hacker) - AI Trainer

DataAnnotation Oklahoma 🇺🇸 Remote

Oklahoma

1mo ago Closed

$50 - $100/hr Contract Ai Security Ai Trainer Ai Training

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

DataAnnotation seeks a contract Penetration Tester (Ethical Hacker) - AI Trainer to help train AI models by evaluating cybersecurity content, solving security problems, and providing feedback that shapes how AI systems reason about threats and defenses. The role supports remote work with a flexible schedule. Compensation ranges from USD 50 to 100 per hour, payments are processed via PayPal, and the position is open to residents of the US, Canada, UK, Ireland, Australia, and New Zealand.

Responsibilities

Evaluate AI-generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for real-world accuracy and validity.
Design and solve security-focused technical problems used to train AI systems.
Write clear technical explanations and security-relevant code.
Provide feedback that directly shapes the next generation of AI security models.

Requirements

2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.
Some coding experience; comfortable navigating and patching a codebase.
Fluency in English with strong writing skills.
Bachelor's degree preferred.
Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote work from locations in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule that lets you choose projects and set your own hours, using your own computer from home.
Competitive pay on an hourly basis, with rates up to 60 USD per hour and potential higher bonus rates on select projects.
Opportunity to influence the development of AI technologies designed for cybersecurity.