Source Job

$160,000–$200,000/yr

  • Build and maintain backend services and AI-assisted applications for threat investigation workflows.
  • Partner with investigators to turn operational challenges into practical engineering solutions.
  • Troubleshoot production issues and support on-call coverage to keep critical systems reliable.

Python Backend Development REST APIs Troubleshooting

20 jobs similar to Threat Investigation Engineer

Jobs ranked by similarity.

US

  • Investigate security incidents using digital forensics and data analysis.
  • Build automation and detection models to identify unusual activity at scale.
  • Lead complex investigations with Legal, Privacy, and Engineering partners.

This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.

Global

  • Lead incident response for major hacks, coordinating triage, communications, and post-incident reports.
  • Ensure major hacks are visible to customers within hours and keep TRM's hack data complete and accurate.
  • Design AI-powered systems to automate hacks analysis and detect vulnerable contracts before exploitation.

TRM provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM is a Series C company with $220M in total funding, backed by top investors, operating as a distributed-first company with hubs in major cities.

$180,000–$260,000/yr
US

  • Build repeatable benchmarks and evaluation pipelines to measure model accuracy, hallucination, retrieval quality, latency, and cost.
  • Develop production retrieval, drafting, document, and agent workflows from research prototypes.
  • Deploy and operate cloud infrastructure, backend services, APIs, and internal tools.

They are a healthtech company building AI-powered products. The company values collaboration between AI research and product development.

$120,000–$160,000/yr
US

  • Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
  • Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
  • Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.

TaskUs is a provider of outsourced digital services and next-generation customer experience for fast-growing technology companies. With approximately 60,000 employees across 23 locations worldwide, the company maintains a People First culture focused on employee well-being and internal mobility.

$6,000–$7,500/mo
US

  • Lead technical onboarding for enterprise accounts, from kickoff through go-live and ramp.
  • Build voice agents and design integrations with customer systems using Retell APIs and webhooks.
  • Troubleshoot live deployments and resolve production issues across telephony, LLMs, and integrations.

Retell AI uses first-principles thinking to reimagine the call center with cutting-edge voice AI. Backed by Y Combinator, the company has scaled to $80M in ARR with a team of 50 and is valued at over $1.5B.

North America

  • Take deep ownership of key systems and product areas, becoming the technical expert and primary point of reference.
  • Architect, build, and maintain highly available and scalable REST APIs and backend services.
  • Use agentic development workflows and AI coding tools as standard engineering practice.

This partner company builds an AI-driven e-commerce messaging platform powered by customer context and data. It is a high-growth, remote-first environment with a collaborative and supportive culture.

$109,400–$191,500/yr
Canada Unlimited PTO

  • Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
  • Lead response to incidents affecting customers and track incidents to closure across functional teams.
  • Build and maintain incident response playbooks, handbooks, and cybersecurity standards.

ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.

US

  • Design and write detections for data misuse and exfiltration at scale, closing visibility gaps across infrastructure.
  • Build automation and detection models that surface anomalous activity and speed up response to insider threats.
  • Partner with engineering, HR, and Legal on complex investigations and participate in incident response and on-call rotation.

Ukraine Unlimited PTO

  • Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
  • Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
  • Partner with security engineering to turn findings into actionable defense improvements.

Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.

$125,000–$145,000/yr
US

  • Design, build, and maintain Python applications, backend services, RESTful APIs, and microservices.
  • Own production software from design through deployment, including LLM integration and RAG architectures.
  • Collaborate with product, QA, and DevOps to deliver reliable, scalable features.

JBS builds backend applications, APIs, and AI-enabled software for clients. The company is fully remote and fosters a collaborative, cross-functional team culture.

$171,500–$245,000/yr
US

  • Dissect and outmaneuver sophisticated cyber attack techniques across endpoint and cloud environments.
  • Translate complex threat research into scalable detection recommendations and engineer attack code.
  • Collaborate with detection engineers, intelligence analysts, and threat hunters to prioritize and refine deliverables.

Zscaler provides a cloud security platform that securely connects users to applications, protecting customers from cyberattacks and data loss. It is the world's largest in-line cloud security platform with an AI-native culture.

US 12w maternity 12w paternity

  • Design, develop, and maintain end-to-end solutions using primarily Ruby on Rails for the ISPM platform.
  • Collaborate with security researchers to understand hacking strategies and build scalable solutions to emerging threats.
  • Be a technical thought leader, providing architectural and design direction while mentoring junior engineers.

Huntress is a remote-first cybersecurity company founded by former NSA operators, making enterprise-grade security accessible to businesses of all sizes. They secure over 6 million endpoints and 16 million identities worldwide, with a culture of standing with customers and each other.

$125,000–$150,000/yr
US Unlimited PTO

  • Design, develop, and maintain back-end components for internal and open-source cybersecurity projects.
  • Build REST and GraphQL APIs, command-line tools, and containerized services using Python, Go, and Docker.
  • Contribute to infrastructure automation and collaborate with teammates to solve complex technical problems.

SpecterOps develops internal and open-source cybersecurity projects such as Mythic and Ghostwriter for the security community. We are a small, transparent team that values autonomy, collaboration, and continuous improvement.

$105,000–$260,000/yr
Global

  • Build infrastructure for frontier AI agent research: environment execution, trajectory collection, and evaluation at scale.
  • Develop reusable tools, APIs, and pipelines for launching experiments, managing data, and inspecting results.
  • Turn research prototypes into tested systems, making experimentation faster, more reproducible, and cost-efficient.

HUD builds reliable, fair, and open infrastructure for AI data, making data valuable for creators and trustworthy for labs. The team is a quickly growing group of ~25 researchers, engineers, and operators backed by $16M from top VCs and YC.

$116,800–$127,750/yr
North America Unlimited PTO

  • Build and operate backend services that move data through GrowthLoop, from warehouse queries to downstream systems.
  • Improve event handling, query execution, and delivery, and support the product’s move toward real-time capabilities.
  • Participate in on-call rotation, fix reliability issues, and build shared tools that reduce repeated work.

GrowthLoop built the first composable CDP, helping marketers leverage live, first-party data from their cloud warehouse to launch highly targeted campaigns. It is a founder-led, remote-first startup with a flat, high-agency culture, partnering with brands like Google, Costco, and Ford.

US Europe

  • Build foundational platform services for AI products, including user management, authentication, permissions, and resource access.
  • Own full-stack features end to end, from backend APIs to customer-facing dashboards and internal tools.
  • Work remotely with technical autonomy, collaborating across engineering and product teams on scalable systems.

They build foundational systems that power a suite of innovative AI products used by millions worldwide. They are a high-growth, AI-first engineering organization with an autonomous, low-bureaucracy culture.

North America

  • Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
  • Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
  • Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.

Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.

Global

  • Own the architecture and evolution of APADCode's core backend platform and stateful AI interviewer runtime.
  • Design event-driven systems, coding execution infrastructure, and asynchronous pipelines for AI evaluation.
  • Build production-grade reliability, observability, and security across service boundaries and deployment workflows.

APADCode is an early-stage AI startup building live, adaptive technical interview infrastructure for evaluating software engineers. It is a small, founder-backed team focused on real hiring workflows and direct collaboration.

Global

  • Review defensive-security and infrastructure-security RL environments for realism, solvability, and correct grading.
  • Flag missing context, inconsistent files, unclear requirements, or anything that makes tasks ambiguous.
  • Write concise justifications for each decision and work async on a flexible part-time schedule.

IdleXperts is idler's quality assurance network, made up of part-time remote experts who review reinforcement-learning environments before customer delivery. The company relies on independent, self-directed contributors with deep security expertise to ensure tasks are fair and correctly graded.

$155,000–$200,000/yr
Americas Unlimited PTO 16w maternity 16w paternity

  • Design and operate systems that transform high volumes of identity data with correctness and freshness.
  • Contribute to the technical vision for world-class data infrastructure powering engineering and AI teams.
  • Establish SLOs, observability, and operational tooling to catch failures before they reach customers.

Lumos builds the industry's first Autonomous Identity Platform, connecting apps, identities, and data to manage access risk. With ~130 employees and backing from top investors, the company values ownership, curiosity, and trust.