Malwarebytes is reimagining security to safeguard devices, data, and people — no matter their location, lifestyle, or means. What began in 2008 with one person helping another remove a malware infection has grown into a global leader in online protection, with an all-in-one suite of cybersecurity, privacy, and identity protection solutions that empower millions of people worldwide to enjoy their digital lives, free from threats and scams.

About ThreatDown

ThreatDown is a leader in elite Managed Detection and Response (MDR), purpose-built to empower resource-constrained security teams with high-efficacy protection, without the complexity. As attacks grow faster and more automated, ThreatDown pairs proprietary AI and threat research with analyst judgment to deploy in minutes to deliver high-efficacy protection. Recognized by MRG Effitas, AVLab, and G2, ThreatDown scales security operations to intercept sophisticated attacks at the speed of modern threats. At ThreatDown, you’ll join a team driven by innovation, resilience, and a passion for empowering businesses to thrive securely. If you're ready to make a real impact in cybersecurity, we’d love to meet you.

ThreatDown is looking for..

We're looking for 2 Engineers - Backend Software Engineer as well as a Full Stack Engineer, who can solve problems creatively and adapt to new challenges. You'll work on cybersecurity solutions that protect enterprise clients from security threats. The role involves building and maintaining backend systems that serve a large user base. You'll be part of our Research department, working on technical challenges related to threat detection and prevention. We need someone who can handle complex backend development work and contribute to products that directly impact client security. 

What You Will Do:

Develop and improve ThreatDown products using current technology and best practices 
Help design and build enterprise security solutions alongside the research team 
Collect and analyze security data to create metrics for tracking and predicting threats 
Work collaboratively with team members to meet project goals and deadlines

Skills You'll Need to Have:

Strong experience in backend technologies, with a specific focus on efficiently ingesting and processing vast datasets comprising millions of files     
Proficiency in Go and Python, with a strong ability to leverage these languages for complex, scalable solutions
For the Full Stack  Engineer we are looking for a candidate with JavaScript, React.js experience.
Adept in cloud-native (AWS, Azure or similar) development methodologies, showcasing an ability to design and deploy applications that fully utilize the power of cloud compute

Perks & Benefit:

Comprehensive medical, dental, and vision insurance coverage

Employee Referral Bonus Program

Wellness programs

Comprehensive Time Off policy
(Benefits and Perks subject to change by country/region)

Annual Compensation Range: The expected salary range for this role is €40,000–€50,000 per year. Actual compensation will be determined based on experience and qualifications.

An opportunity to do something great for yourself and the world!

[]

About the company

ThreatDown provides managed detection and response (MDR) services designed for resource-constrained security teams. It delivers active defense that protects endpoints and networks with high efficacy while minimizing complexity, deployable in minutes. The system runs on proprietary AI engines and leverages world-class threat research to detect and stop threats, aiming to outpace competitors in catching incidents others miss. The company differentiates itself by focusing on ease of deployment, scale, and performance for teams with limited security resources, and by earning recognition from independent evaluators such as MRG Effitas, AVLab, and G2. ThreatDown’s goal is to empower organizations to defend their environments effectively without adding operational burden, helping security teams grow their coverage from initial deployment to ongoing protection across markets in California and Europe.

Company Size

1-10

Company Stage

N/A

Total Funding

N/A

Headquarters

Santa Clara, California

Founded

N/A

Get referred to ThreatDown

See people who can refer or advise you

Simplify's Take

What believers are saying

July 2026 AI visibility and NHI ITDR address fast-growing Shadow AI and identity gaps.
Distribution rose from 1% to 40% by April 29, 2026, showing channel execution.
Bundle deals grew 14% in 2H 2025, indicating customers consolidate spend across ThreatDown.

What critics are saying

Crowded mid-market security pits ThreatDown against Microsoft, CrowdStrike, and Sophos every renewal cycle.
Reliance on partners creates pricing pressure if distributors like Kite demand higher margins.
If channel adoption stalls after 2026, Malwarebytes can reabsorb ThreatDown or cut investment.

What makes ThreatDown unique

ThreatDown bundles EDR, MDR, email, patching, and ITDR in one console.
Kendra Krause’s April 2026 channel-first overhaul made distributors the primary route to market.
Nexus Partner Program offers deal protection, margin retention, MDF, and rebates for partners.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance
Dental Insurance
Vision Insurance
Employee Referral Bonus
Wellness Program
401(k) Retirement Plan
401(k) Company Match
Remote Work Options

Company News

ThreatDown

Oct 6th, 2026

It took one password to compromise two identity platforms.

It took one password to compromise two identity platforms. A stage-by-stage walkthrough of a realistic attack across Microsoft Entra ID and Okta, and exactly where the intrusion gets shut down. October 5, 2026 Paolo Bacchiocchi, Leonardo Giannoni Attackers don't need malware or a zero-day to take over an identity. They need one working password. From there, legitimate platform features do the rest: sign-ins, invites, role changes, and API tokens. Nothing that trips an antivirus alert. Its new eBook walks through exactly that kind of intrusion against a fictional target organization. A password spray lands a valid credential - a sign-in from an unexpected location and hour follows. Then, a federation pivot turns one compromised Microsoft Entra ID account into full access across Okta as well. From there, the attacker builds persistence two different ways: inviting an external identity into the tenant and quietly escalating it to admin in Entra ID, and creating a long-lived API token in Okta outside normal business hours. The exfiltration attempts that follow, a blocked SSO launch and a 202-file OneDrive download, plus 7 downloaded archives, play out the same way. Ordinary actions that only become alarming in context. That context is what ThreatDown Identity Threat Detection & Response (ITDR) provides. Every stage in the eBook comes with a real ITDR alert view: the identity involved, the anomaly that triggered it, and how it connects to everything before and after it in the same session. The scenario was designed, simulated, and documented by Paolo Bacchiocchi and Leonardo Giannoni of the ThreatDown Threat Research Team. See the full attack chain, stage by stage, and exactly where ITDR shuts it down. ThreatDown is ranked as a leader in EDR + MDR by G2

News4Hackers

Jul 24th, 2026

New information security products released This week - july 24, 2026.

New information security products released This week - july 24, 2026. Post Views: 27 This week's highlights include advancements from Astelia, Druva, Swimlane, and ThreatDown aimed at addressing evolving cybersecurity challenges. Druva expands AI workload protection with new capabilities. Druva launched Druva AI Resilience, a solution focused on safeguarding AI-driven systems through recovery, governance, and defense mechanisms. The platform integrates with Microsoft Copilot, Claude Code, and Druva Model Context Protocol (MCP) to manage AI workflows. It also includes the Dru SRE Agent for agentic service reliability, with enhanced Dru MetaGraph functionality to monitor system interactions. ThreatDown enhances AI and identity security visibility. ThreatDown introduced AI visibility features to provide organizations with comprehensive inventories of AI tools in their environments. The update extends ITDR (Identity Threat Detection and Response) capabilities to secure non-human identities (NHI), addressing risks associated with unmanaged AI assets and machine identities. Astelia incorporates agentic AI for vulnerability management. Astelia updated its reachability analysis platform with agentic AI capabilities to help security teams address shrinking exploit windows. The system automates repetitive tasks such as analysis and coordination while maintaining human oversight for critical decisions. This approach aims to improve operational efficiency in managing vulnerabilities. Swimlane AI SOC optimizes security operations for managed service providers. Swimlane AI SOC automates alert handling to reduce workload for security analysts, enabling managed security service providers (MSSPs) to support more clients without increasing staff. The platform replaces custom professional services with a standardized model, accelerating onboarding and improving analyst productivity. It also addresses rising alert volumes and complex customer environments while maintaining profitability. Additional developments. Additional developments include security researchers uncovering methods to host malicious versions of Claude, exploiting a critical Check Point vulnerability (CVE-2026-16232) to compromise firewall management, and analyzing the growing risks of Shadow AI as a blind spot in enterprise security. Other updates focus on phishing trends, ransomware tactics, and tools for simplifying security management.

Business Wire

May 12th, 2026

ThreatDown launches ITDR to detect credential-based attacks after authentication

ThreatDown, formerly Malwarebytes' corporate business unit, has launched Identity Threat Detection and Response (ITDR) to combat credential-based attacks. The product monitors identities across Microsoft Entra ID, Okta and Active Directory to detect suspicious activity, misconfigurations and attacks targeting user accounts. ITDR integrates natively with ThreatDown's EDR and MDR platform, providing correlated endpoint-to-identity visibility without additional agents or consoles. It deploys in minutes and addresses the growing threat of attackers using valid stolen credentials to bypass IAM and MFA systems. Identity breaches currently take over eight months on average to detect and contain. The company also announced Ultimate MDR Plus, a premium bundle combining ITDR, enhanced MDR Plus service and Premium Support. ITDR is available now through partners and MSPs as an add-on or within the Ultimate MDR Plus bundle.

Disaster Recovery Journal

Apr 29th, 2026

ThreatDown accelerates channel-first strategy, grows distribution from 1% to 40%.

ThreatDown accelerates channel-first strategy, grows distribution from 1% to 40%. April 29, 2026 * Nexus Partner Program launches with deal protection, margin retention, and new MDF and rebate structure * CRN names ThreatDown a 5-Star Partner Program Award winner; three executives named Channel Chiefs * New pod-based sales model, partner incentives, and planned Partner Advisory Council expand ecosystem investment ThreatDown, formerly the corporate business unit of Malwarebytes, today announced major progress in this past year, highlighted by a rapid shift to a distribution-led go-to-market model and expanded investment in the mid-market and broader channel community, including managed service provider (MSP) partners. ThreatDown has rebuilt its partner program and sales organization to align fully with a channel-first strategy. The most visible result: the share of business transacted through distribution grew from approximately 1% to roughly 40% - a shift that simplifies partner engagement and creates a more scalable, predictable route to market. "We're focused on building a partner model that is easier to work with and designed for long-term growth," said Kendra Krause, General Manager of ThreatDown. "Shifting to a distribution-led approach reflects the confidence partners have placed in this model and the value they see in working with ThreatDown." Rebuilding the Partner Model for Scale Krause joined ThreatDown in July 2025 as the company intensified its focus on the channel-first model and accelerated partner growth across market segments. ThreatDown also strengthened its channel commitment through the Nexus Partner Program, a comprehensive initiative that puts partners at the center by fostering collaboration and creating new growth opportunities across its global network. The redesigned program introduced genuine deal registration, competitive renewal discounting and margin retention, as well as new rebates and market development funds to support partner-led growth. Unlike competitors that register deals only to take them direct, ThreatDown strictly enforces its rules of engagement on deal registration, a distinction that has become a meaningful differentiator for partners evaluating their options in the mid-market security space. ThreatDown has also expanded its distribution relationships, giving partners access to its solutions through established procurement and fulfillment channels. The company is building campaign kits, training, and enablement resources to help partners get to market faster and more effectively. A Pod-Based Sales Model Built for Partners ThreatDown has restructured its global sales organization into dedicated pods, each pairing a channel manager, renewals account manager, MSP specialist, systems engineer, and customer success resource around a shared set of partners. The result is a more consistent, coordinated experience across new business, renewals, and upsell opportunities, supported by a single team financially aligned with partner success. Growing Momentum in the Mid-Market and MSP Segment ThreatDown is seeing early signs of platform adoption deepening across its customer base. Bundle deals in the Advance, Elite, and Ultimate tiers grew 14% in the second half of 2025, while MSP customers increased usage of ancillary products including DNS, MDR, and Cloud for Business by 12% over the same period. Together, the trends point to customers consolidating security spend with ThreatDown rather than mixing vendors. MSPs represent one of ThreatDown's fastest-growing customer segments. The company has expanded its presence across distribution marketplaces and deepened strategic alliances with RMM and PSA vendors to meet MSPs wherever they prefer to buy, whether through a distributor, a direct relationship, or an integrated marketplace. "ThreatDown truly stands out in the industry," said Scott Larson, Managing Partner and Owner at Technology By Design. "Backed by an innovative, intuitive security platform, ThreatDown genuinely listens to the partner community and turns feedback into meaningful action from sales enablement to deal protection to platform support." Industry Recognition for Partner Commitment ThreatDown's channel transformation has earned recognition from two of the industry's leading authorities on partner programs. CRN awarded ThreatDown a 5-Star Partner Program Award in 2026. The publication also named three ThreatDown executives to its annual Channel Chiefs list - Kendra Krause, General Manager; Dave DeHaven, Vice President, Channel Sales Americas; and Brian Kane, Vice President, Global MSP and Distribution - recognizing leaders who drive successful channel strategies and meaningful partner engagement. Looking Ahead ThreatDown plans to launch a Partner Advisory Council in FY27, giving its most strategic partners a direct role in shaping program strategy and future investments. The company will be present at more than 40 industry events this year, ThreatDown started with Channel Partners and MSP Summit at Informa Expo in April, with additional channel-focused events planned throughout the year. To learn more about the latest threats and cybersecurity strategies for businesses and the channel, visit threatdown.com or follow ThreatDown on LinkedIn and X.

Kite Distribution

Apr 13th, 2026

Kite forges alliance with ThreatDown, powered by Malwarebytes.

Kite forges alliance with ThreatDown, powered by Malwarebytes. Leicestershire, UK, April 13th, 2026 - Kite, an independent IT distributor focused on delivering cutting-edge cybersecurity solutions to the UK and Ireland, has announced a strategic partnership with ThreatDown, powered by Malwarebytes, supplier of the award-winning, all-in-one ThreatDown cybersecurity software platform for managed detection and response and advanced email protection. "We are very excited to be announcing this new partnership with ThreatDown." said Dave Marshall, Director at Kite, "With the threat landscape always evolving and a shortage of cybersecurity professionals, there is clear demand for a solution which is simple enough for users of any skill level to pick up, but sophisticated enough to provide extensive protection against threats." "ThreatDown's platform is the perfect solution to these issues, and their robust partner support makes them an excellent addition to Kite's vendor portfolio. We look forward to introducing ThreatDown to our channel partners and help drive growth and opportunities across the UK." Kite specialises in bringing next-generation cybersecurity solutions to the UK channel, helping innovative global vendors scale their presence in the UK and Ireland with bespoke marketing and sales services. By focusing on responsive, collaborative partnerships, Kite delivers top-tier service to its channel partners. ThreatDown delivers an all-in-one cybersecurity solution, including EDR, MDR, Email Security, Patch Management, and more into one simple to use, readily accessible cloud-based console. The platform combines industry-leading technology with the services of experienced cybersecurity experts to simplify protection and ease the burden on IT teams, while still catching and guarding against the threats that other solutions miss. "This new partnership with Kite will be a big step forward for us in expanding and strengthening our presence in the UK." said Brian Kane, VP Global MSP & Distribution at ThreatDown, "IT teams are stretched increasingly thin, and organisations are on the hunt for a cost-effective solution which covers all of their bases without extensive time and skill investment. ThreatDown answers these problems with an all-in-one platform that's easy to use, readily available, and backed up by a 24/7/365 team of expert security analysts." "Kite's focus on relationships across the UK channel, coupled with the strength of our own partner program, makes this the ideal partnership for us to drive adoption of the ThreatDown platform. We're looking forward to working together and bringing simpler cybersecurity to overstretched IT teams." About Kite Kite is a UK and Ireland-focused distributor of next-generation cybersecurity solutions, working with innovative technology vendors and specialist partners to scale their businesses in the region. With a responsive and collaborative approach, Kite provides comprehensive marketing and sales services to help vendors and partners succeed in the competitive cybersecurity market. About ThreatDown ThreatDown delivers a channel-first cybersecurity platform built for partners delivering modern managed security. With 24x7 Managed Detection & Response (MDR) backed by powerful Endpoint Detection & Response (EDR), ThreatDown enables organisations to stop advanced threats quickly and confidently - while helping partners grow predictable recurring revenue.