Senior Security Engineer, Threat Intelligence Job at 1Password

Senior Security Engineer, Threat Intelligence

1Password

Location:
United States; Canada

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

156000.00 - 210000.00 USD; CAD / Year

Save Job

Apply Position

Job Description:

As a Senior Security Engineer specializing in Threat Intelligence on the Detection & Response team, you will focus on understanding adversary behavior, misuse scenarios, and real-world threats, and translating that intelligence into practical, operational outcomes. You will help ensure the team is informed, prepared, and able to act on the threats that matter most, strengthening how we detect, respond to, and validate our defenses.

Job Responsibility:

Research, track, and assess the threat landscape by analyzing relevant threat actors, campaigns, and behaviors affecting 1Password’s attack surface, identity systems, brand, third-party ecosystem, and insider risk scenarios
Analyze and prioritize information to develop actionable intelligence that informs detection coverage, hunting activities, and response readiness
Partner with Detection Engineering to design and validate threat-based detections, including through adversary emulation, simulation, or controlled testing
Use automation and scripting to improve how threat intelligence is collected, enriched, distributed, and actioned across Security workflows
Curate and deliver threat intelligence reporting for both technical teams and executive stakeholders
Build and maintain repeatable threat intelligence processes, workflows, and documentation that scale with the Detection & Response program
Participate directly in security operations by triaging alerts, supporting investigations, managing incidents, and contributing to post-incident learning

Requirements:

5+ years of experience in technical security engineering roles
3+ years focused on threat intelligence
Strong understanding of modern attacker TTPs, including cloud-native, SaaS, identity-focused, and insider-adjacent threat patterns
Experience developing intelligence requirements, prioritization frameworks, analysis workflows, and emulation scenarios
Hands-on experience with scripting or automation (e.g., Python, APIs, SOAR workflows) to improve operational efficiency and cross-team execution
Ability to produce concise, high-quality written intelligence, including executive-level summaries
Familiarity with security telemetry, logs, and investigative workflows used by detection and response teams
Willingness to participate in an on-call rotation and support security incidents during high-severity or off-hours events

Nice to have:

Operationally minded, with a strong instinct for turning intelligence into concrete security outcomes
Comfortable working across the full lifecycle of security events
Able to think like an adversary while remaining grounded in defensive priorities and business risk
A clear, calm communicator who can distill complex threat scenarios for engineers and senior leaders alike
Collaborative, curious, and motivated by improving security through learning, validation, and iteration

What we offer:

Health benefits
Dental benefits
401k/RRSP
Generous paid time off
Equity grant
Participation in incentive programs
Maternity and parental leave top-up programs
RSU program for most employees
Retirement matching program
Free 1Password account
Paid volunteer days
Peer-to-peer recognition through Bonusly
Remote-first work environment

Additional Information:

Job Posted:
February 21, 2026

Employment Type:

Fulltime

Work Type:

Remote work

1Password - All Job Offers

Job Link Share: