402 companies use ThreatConnect, based on their job posts and their employees' public profiles. From October 2025 to August 2026, 217 job posts named it. Security Analyst roles mention it most.
Which companies name ThreatConnect in the most job posts?
Among the companies with the most job posts naming ThreatConnect are UST (29), Cyware (26) and Deloitte (20). Booz Allen Hamilton is the newest of the five companies in the table, with its first job post naming it in May 2025.
CompanyPostsRecent job post
USTProfessional Services · first seen May 202429
"…Alto Cortex XSOAR, Tines, Splunk Phantom, IBM Resilient, Cyware, Microsoft Logic Apps, ThreatConnect to streamline response activities."SOAR Automation Engineer, Oct 23, 2026
Cywarefirst seen Sep 202226
"Experience with Threat Intel Vendors/Tooling such as: MISP, Anomali Threatstream, ThreatConnect, Threat Quotient"Solution Engineer, Jun 12, 2026
DeloitteProfessional Services · first seen Sep 202220
"Knowledge of Microsoft Entra ID (formerly Azure Active Directory), Amazon Web Services (AWS) CloudTrail, GuardDuty, Virtual Private Cloud (VPC) Flow Logs, Microsoft AIR, Qualys, and ThreatConnect"Tier 2 Security - Assistant Manager - Hyderabad, Jun 7, 2026
Booz Allen HamiltonProfessional Services · first seen May 202520
"This role manages and operationalizes ThreatConnect to enrich SOC investigations, identify emerging threats, and maintain high‑quality intelligence workflows."Cyber Threat Intelligence Analyst, Mid, Oct 1, 2026
eSentireProfessional Services · first seen Dec 202319
"Experience with threat intelligence platforms (TIPs) such as Recorded Future, Mandiant Advantage, ThreatConnect, or Anomali."Senior Product Manager, Threat Intelligence (Tel Aviv, Israel), Jun 16, 2026
Job posts mentioning ThreatConnect went from 0.08 to 0.12 in every 10,000 job posts, comparing March to May with June to August 2026. These are small numbers of job posts, so a few companies can move them.
Show the data
Month
Job posts naming ThreatConnect
All job posts
Per 10,000
Oct 2025
18
1,413,673
0.13
Nov 2025
31
1,822,119
0.17
Dec 2025
14
1,236,103
0.11
Jan 2026
27
1,828,002
0.15
Feb 2026
16
1,856,647
0.09
Mar 2026
15
1,850,711
0.08
Apr 2026
12
1,728,886
0.07
May 2026
15
1,821,509
0.08
Jun 2026
26
1,909,496
0.14
Jul 2026
28
1,815,180
0.15
Aug 2026
15
1,835,698
0.08
How many companies named ThreatConnect in a job post for the first time in recent months?
ThreatConnect showed up in job posts at 26 companies for the first time from June to August 2026, and 13 in the three months before. Over the 11 months from October 2025, 75 companies posted their first job naming it.
March to May 202613
June to August 202626
October 2025 to August 202675
Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.
How do we know which companies use ThreatConnect?
294 companies name ThreatConnect in job posts they wrote, and employees' profiles add 108 more. 24 show up in both job posts and employees' profiles.
How we knowCompaniesShare
Job posts name ThreatConnect
29473%
Employees' profiles list ThreatConnect
10827%
402 companies. Each is counted once, under the strongest evidence we have for it.
What size are the companies that use ThreatConnect?
Companies with more than 5,000 employees are 1.6 times as common among ThreatConnect users as on the typical tech page, at 38%. 72 of its companies have fewer than 50 employees.
Share of its companies
Typical tech page
ShareTypical
Under 50 employees
18%22%
50 to 999
29%38%
1,000 to 5,000
16%17%
Over 5,000
38%23%
Where are ThreatConnect companies based?
ThreatConnect is concentrated in the United States, home to 61% of the companies that use it. India is less common than usual, at 4.6% against 6.9% on the typical tech page.
ShareTypical
United States
61%43%
United Kingdom
4.6%6.4%
India
4.6%6.9%
Brazil
3.1%2.8%
France
3.1%4.6%
Canada
2.8%3.6%
Companies in 41 countries and territories. Shares are of companies with a known headquarters country.
Show the data
Country
Companies
Share
Typical tech page
United States
235
61%
43%
United Kingdom
18
4.6%
6.4%
India
18
4.6%
6.9%
Brazil
12
3.1%
2.8%
France
12
3.1%
4.6%
Canada
11
2.8%
3.6%
Which teams work with ThreatConnect?
ThreatConnect work is spread across teams. SOC leads, at 19 companies.
TeamCompanies
SOC
19
CTI
13
Cybersecurity
9
Threat hunting
9
Threat intelligence
9
Cyber security operations
5
What else do ThreatConnect companies use?
The tool most tied to ThreatConnect is Anomali. 41% of ThreatConnect companies use it, 553 times the usual rate for their size. Next is Recorded Future: 39% of these companies use it, against 0.15% of similar ones.
Share of the 148 ThreatConnect companies counted here whose job posts also name the tool
Typical for companies the same size
Which companies started naming ThreatConnect in job posts recently?
From April to August 2026, 30 companies with 50 or more employees posted their first job naming ThreatConnect: 9 commercial, 8 mid-market and 13 enterprise. Rappi and Happiest Minds Technologies lead the new enterprise companies, with 4 job posts each from April to August.
Companies that named ThreatConnect in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.
Which roles mention ThreatConnect most?
Security Analyst is the role behind 41% of the job posts that mention ThreatConnect. Security Engineer is second, at 9.7%.
RoleSharePosts
Security Analyst
41%88
Security Engineer
9.7%21
Information Security Engineer
6%13
IT Support
5.1%11
Financial Analyst
3.7%8
Researcher
2.8%6
Show the data
Role
Share
Oct 2025 to Aug 2026
Mar to May 2026
Jun to Aug 2026
Security Analyst
41%
88
21
31
Security Engineer
9.7%
21
3
3
Information Security Engineer
6%
13
2
2
IT Support
5.1%
11
5
1
Financial Analyst
3.7%
8
0
1
Researcher
2.8%
6
0
0
Which project themes come up in ThreatConnect job posts?
Digital transformation is the broadest theme in ThreatConnect job posts (20); the most common specific one is Security Infrastructure Modernization, at 13. After that comes Cloud Migration, with 3.
Project themeJob posts
Digital Transformation20
Security Infrastructure Modernization13
Cloud Migration3
"Guide the migration from MISP to ThreatConnect (SaaS)"
Siemens, Head of Cybersecurity Platforms (f/m/d), Feb 1, 2026
About this data
Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.
Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.
Sumble has a free plan, and the same data is available through its API and MCP server.
A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.
Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.
