Cybersecurity Jobs: Which Companies Are Hiring Right Now

On 3 November 2026, 754 cybersecurity roles were open at 182 tech companies that Tideline follows, 6% of their open tech roles. Most of them are engineering roles, not analyst or SOC roles, and cybersecurity is one of the most remote fields in tech: more than a third of its roles are remote.

Every number here comes from the companies’ own job boards on that date. Tideline’s cybersecurity jobs page shows its cybersecurity field live, so use this article to understand the shape of security hiring and that page to see what is open today.

How many cybersecurity jobs are open right now

Role type	Open roles	Companies	Remote
Engineers	432	136	172
Managers, architects, researchers and leads	238	89	69
Analysts	47	23	20
Security operations (SOC)	37	22	13

A role counts when its title names security work: security, cybersecurity, cyber, infosec, application or cloud security, detection, incident response, penetration testing, threat, or SOC. Physical and site security, “national security” sales and policy roles, and chip-design “SoC” titles are left out. Each role is in one type: SOC first, then analyst, then engineer.

By specialty named in the title, the same 754 roles break down like this:

Specialty	Open roles	Companies	Remote
General security engineering and other roles	363	118	117
Detection and incident response	114	55	56
Application and product security	85	52	32
Cloud and infrastructure security	74	45	24
Governance, risk, compliance and identity	65	35	11
Threat intelligence and research	37	18	24
Offensive security and red teams	16	12	10

The largest group is titles that just say “security engineer” or “security software engineer” without a specialty. Detection and incident response is the largest named specialty.

Companies hiring for cybersecurity roles

Twenty-five companies hold 428 of the 754 roles. Each row links to the company’s own job board or careers page, where the role is posted and where you apply. “Remote” says whether the company has any remote security roles open, and how many.

Tideline is independent and is not affiliated with any company or job platform mentioned here. Company names are used only to identify where roles are open.

Company	Cybersecurity roles	Main locations	Remote	Job board
Anthropic	53	San Francisco (48), New York (38), Seattle (23)	Yes (12)	Job board
OpenAI	38	San Francisco (28), New York (11), Seattle (11)	Yes (10)	Job board
Sezzle	28	Bogotá (6), New Delhi (3)	Yes (28)	Job board
Sophos	26	No city given	Yes (26)	Job board
Databricks	23	Bellevue (4), Mountain View (4), San Francisco (4)	Yes (7)	Careers page
Nebius	23	Tel Aviv (9), Amsterdam (2), Singapore (2)	Yes (7)	Careers page
Okta	22	Toronto (8), Bengaluru (6), Washington (5)	No	Careers page
Cloudflare	20	Austin (13), New York (7), London (6)	Yes (2)	Careers page
Stripe	20	Dublin (9), London (2), Luxembourg (2)	Yes (3)	Careers page
Samsara	18	Seattle (3), Dallas (2), San Francisco (2)	Yes (16)	Careers page
Braze	14	Austin (2), Chicago (2), New York (2)	No	Job board
Snowflake	14	Menlo Park (5), Bellevue (4), McLean (1)	Yes (1)	Job board
xAI	12	Palo Alto (9), New York (7), Washington (6)	No	Job board
Canonical	11	No city given	Yes (11)	Job board
Cerebras	11	Sunnyvale (6), Bengaluru (1)	Yes (1)	Job board
Datadog	11	New York (4), Paris (3), Boston (1)	Yes (3)	Careers page
GitLab	11	Bengaluru (1)	Yes (10)	Job board
Affirm	10	No city given	Yes (10)	Job board
Coinbase	10	Singapore (1)	Yes (10)	Careers page
MongoDB	10	New York (5), Austin (3), Seattle (3)	Yes (1)	Careers page
Sony Interactive Entertainment	10	Aliso Viejo (1), Dublin (1), London (1)	Yes (4)	Job board
Mistral AI	9	Paris (8), London (2), Amsterdam (1)	No	Job board
Scopely	9	Barcelona (3), Bellevue (1), Dublin (1)	No	Careers page
Tenable	8	Tel Aviv (3)	Yes (1)	Job board
Asana	7	Vancouver (3), Warsaw (3), San Francisco (1)	No	Careers page

AI companies lead the table: Anthropic and OpenAI together have 91 of the roles. Security companies (Sophos, Tenable), fintech (Sezzle, Stripe, Affirm, Coinbase) and cloud and developer companies (Cloudflare, Databricks, Datadog, GitLab) make up much of the rest. The other 157 companies have 326 roles between them.

Spotted an error or want a listing corrected? Email [email protected].

Cybersecurity analyst and SOC analyst jobs

A security operations centre, or SOC, is the team that watches an organisation’s systems and responds when something goes wrong. The UK’s National Cyber Security Centre, in its guidance on building one, says SOCs vary in scope but most are responsible for detecting and responding to cyber attacks, with the aim of limiting the damage from attacks that get past an organisation’s other defences. Some also take on vulnerability assessment and compliance work.

Analysts are the people who do that watching. The US NICE Workforce Framework, the government’s reference list of cybersecurity roles, describes defensive analysts as analysing the data that security tools collect, and incident responders as investigating and responding to incidents.

At the companies Tideline follows, these titles are less common than many people expect:

• 47 analyst roles at 23 companies. Sophos has 13 of them, most in threat analysis; Cirrus Logic, Okta, Recorded Future and Wrike have 3 each. Titles include threat analyst, threat intelligence analyst and security risk analyst.
• 37 security operations (SOC) roles at 22 companies. Only 5 have “analyst” in the title. Most security operations work here is titled engineer: 19 are security operations engineers, at companies such as Samsara (8), Brex (4) and Canonical, Pleo and Cohere. The rest are managers, leads and specialists.

If you are searching for SOC analyst jobs, search for “security operations engineer” and “detection and response” too: there are 114 detection and incident response roles in all.

Cybersecurity engineer jobs

432 roles have “engineer” in the title, at 136 companies, led by Sezzle (28), Anthropic (23), OpenAI (21), Cloudflare (15), Braze (14) and Stripe (13). Engineers design and run the defences rather than mainly watching them. The NICE framework puts this work under design and development: building systems that are secure from the start. The specialties in the data:

• Detection and incident response (114 roles at 55 companies): writing detection rules, building the alerting and investigation tools, and leading the response to incidents. Samsara and Sophos have 11 each, Sezzle 9.
• Application and product security (85 at 52): finding and fixing weaknesses in the company’s own software, reviewing designs and code, running bug bounty programmes. Anthropic has 7, Samsara 6, Bugcrowd 5.
• Cloud and infrastructure security (74 at 45): securing cloud accounts, networks and the platforms everything runs on, including zero-trust access. Sezzle has 8, OpenAI 6.
• Governance, risk, compliance and identity (65 at 35): security policy, audits and certifications, and who can access what. Anthropic has 8, Okta and Scopely 6 each.
• Threat intelligence and research (37 at 18): tracking attackers and how they work. Sophos has 11.
• Offensive security and red teams (16 at 12): attacking the company’s own systems, with permission, to find weaknesses first.

Remote cybersecurity jobs

274 of the 754 cybersecurity roles are remote (36%), against 27% of all tech roles at the same companies. 167 are hybrid, 64 on-site and 249 don’t say.

Some employers post all or nearly all of their security roles as remote: Sezzle (28 of 28), Sophos (26 of 26), Samsara (16 of 18), Canonical (11 of 11), GitLab (10 of 11), Affirm and Coinbase (10 of 10 each). The AI companies are the opposite: most of Anthropic’s and OpenAI’s security roles are in San Francisco, New York and Seattle.

Where remote hires can be based	Remote cybersecurity roles
Not stated	109
United States only	71
Europe (a country or region in it)	19
Latin America (a country or region in it)	18
United States and Canada	14
Canada only	13
Anywhere in the world	11
Other single countries or mixes	15
UK (or UK and Ireland)	4

109 remote postings don’t say where they hire from, so the eligibility line on the employer’s page matters. Remote cybersecurity roles, live.

Cybersecurity jobs salary: what employers post

406 of the 754 roles show a pay range set by the employer: 341 in US dollars, 44 in Canadian dollars, 11 in euros and 10 in other currencies. Almost all the yearly US dollar ranges are for roles in the United States.

Roles	Yearly US dollar ranges	Middle of the low ends	Middle of the high ends
All cybersecurity roles	319	$180,000	$263,300
Engineers	187	$174,000	$264,000
Managers, architects, researchers and leads	104	$206,850	$289,000
Security operations (SOC)	15	$135,481	$227,700
Analysts	13	$148,000	$193,500

In other currencies: the 44 Canadian dollar ranges have middle values of C$140,500 and C$188,000, and the 11 euro ranges €74,000 and €101,000.

By specialty, cloud and infrastructure security (31 US dollar ranges) has the highest middle low end, $196,000, and detection and incident response (44) one of the lowest, $157,675. These are the ranges employers wrote on their own postings at tech companies, many of them at senior and staff level; they show what these companies say they will pay for these roles, not what cybersecurity pays in general.

Where cybersecurity jobs are: countries and cities

City	Cybersecurity roles
San Francisco	130
New York	115
Seattle	56
Washington	39
London	31
Austin	29
Toronto	23
Bengaluru	23
Dublin	20
Tel Aviv	20

A role can list several places, so these counts overlap. Washington stands out: 5.2% of cybersecurity roles list it, against 1.4% of all tech roles. Tel Aviv appears in the top ten too, and Israel’s share of cybersecurity roles (3.6%) is higher than its share of any other tech field. 24 roles name no country.

AI security

Securing AI systems is a growing corner of the field: 38 roles at 23 companies name both AI and security, from AI red team engineers to AI security architects. They are covered, with the companies hiring, in AI Jobs: Which Companies Are Hiring for AI Roles Right Now.

Finding cybersecurity jobs on Tideline

• Cybersecurity jobs: who is hiring most, the cities, the levels and the pay posted, live.
• Search cybersecurity roles, and narrow by country, level, remote and minimum pay.
• Related reading: Remote IT Jobs: Companies Hiring Remotely Right Now.

Every role links to the employer’s page. Before you apply, Readback shows your resume the way the hiring software on the other side reads it.

How this data was collected

Tideline reads the public job boards of the 433 tech companies it follows, hosted on Greenhouse, Lever and Ashby, every day. It does not read job sites or aggregators, and it does not cover every employer. On 3 November 2026, 429 of those companies had open roles, 26,269 in all, of which 11,691 were in the ten tech fields Tideline tracks.

This article counts roles by their title, not by Tideline’s own cybersecurity field, so that security roles in product, programme management and technical sales teams are included, and some roles in that field that aren’t cybersecurity work (site security, for example) are not. The two overlap but differ: Tideline’s cybersecurity field had 804 roles at 187 companies that day, and its live page counts those.

Data notes:

• The headline counts roles in the ten tech fields. 29 security-titled roles in sales, marketing and legal (at 12 companies) are left out.
• Left out as not cybersecurity jobs: site and physical security roles (guards, security associates on shifts, facility security officers), “national security” sales, policy and legal roles, titles that only mention a security clearance, fraud and anomaly detection, and chip-design “SoC” titles.
• 15 roles at 14 companies are titled junior, entry level, graduate or internship. This article does not count or promise entry-level roles beyond that.
• 264 of the 754 roles do not state a level. Of the rest, 220 are senior, 145 lead or staff, 72 manager, 19 director, 12 mid-level, 8 entry level, 7 executive and 7 internships.
• Pay figures are the middle values of the posted ranges’ low ends and high ends, not averages, and only where at least 10 postings in one currency and group show a range.
• The figures describe the companies Tideline follows on 3 November 2026, not the whole cybersecurity job market.