312 Employee Reviews
Pros
I've been here 7 years and was promoted twice — both times with raises that were explained to me in writing before I accepted. My $4,200 learning budget has paid for DEF CON twice, a SANS course, and two certs. Devon Choi is a genuinely exceptional team lead who advocates for us with leadership. The blameless post-incident culture is real — I made a significant error last year and we spent two hours fixing the process, not one minute blaming the person. I present my own work to clients. No account manager buffer.
Constructive
Growth at this rate means some administrative processes haven't kept up with headcount — onboarding documentation needs updating. The London office is still figuring out its culture integration. Minor things in the context of the whole.
Pros
I came through the AT Scholars rotational program — $65,000 annual salary during the program, which is more than most internships I was comparing. After 12 months I converted full-time as an Analyst I. 3.5 years later I'm a SOC Team Lead with two funded certifications. Marcus personally welcomed our cohort. Renata Osei is my skip-level and she actually knows who I am and what I'm working on. When a client pushed back on reasonable shift expectations for my team, Renata pushed back on the client. That's when I knew this place was different.
Constructive
The rotating shift schedule is genuinely hard some weeks — it's the nature of SOC work, not a company failure. I'd love better tooling for async communication across time zones as the company grows remote-first.
Pros
I co-lead the BLKST ERG. Our budget is $28,000 per year — real money, not "we'll reimburse reasonable expenses." Our executive sponsor (Marcus) shows up to our quarterly breakfast, not a delegate. When we raised a concern about a promotion process that seemed to be favoring external hires over internal candidates, it was on the all-hands agenda three weeks later with an actual policy change announced. The DEI council reports to the CEO, not HR — that's structural, not decorative. Look at the leadership page: 67% of the C-suite are people of color. They publish those numbers alongside the total workforce numbers because they're proud of both.
Constructive
Growing fast means the BLKST ERG has more members than our current programming can serve — we're working on it with an expanded budget request that's already in review.
Pros
The IR work is the most technically challenging and rewarding I've done in 8 years in this industry. The team Tariq has built is elite — I've learned more in 2 years here than the previous 6 combined. Salary is fair (I negotiated above band midpoint and they explained exactly how the band works). Travel reimbursement is genuinely generous. When I needed to extend my mental health leave for an extra week, no one questioned it and my job was secure.
Constructive
IR is inherently unpredictable — the company is transparent about this in interviews and I knew what I was signing up for, but some weeks are genuinely rough with travel and incident timelines. The 40-hour policy protects you against management, not against client emergencies. That's IR. Not AllThreats' fault, but worth knowing before you apply.
Pros
Promotion criteria are published internally. When I was promoted the first time, my manager walked me through the scorecard that led to the decision — not as a formality, as a genuine conversation. The raise was 18% — above the 15% band move that was published as the standard. When I asked why the extra 3%, my manager explained that my market comp benchmarking put me below midpoint. I didn't have to negotiate. They noticed and corrected it. I've never worked anywhere that did that unprompted. The $4,200 learning budget is real — I've used every dollar every year.
Constructive
Some internal tooling is dated — we're still on older ticket management systems in some workflows. Not a big deal but worth mentioning.
Pros
I left AllThreats in 2022 for a FAANG security role — more money, bigger brand. 18 months later I came back. The FAANG role was technically interesting but I was anonymous. Nobody knew my name, my manager changed twice, and the culture was "values on the wall, performance management in practice." When I reached out to Adriana about returning, she already knew who I was. I rejoined at a higher band than when I left, with no gap in benefits. The person who hired me back said they have a standing practice of re-interviewing people who leave in good standing. That's unusual in this industry.
Constructive
The FAANG comp was genuinely higher — AllThreats is competitive but not top-of-market for total comp. For me the trade-off is worth it, but it's worth knowing if maximizing TC is your primary driver.
Pros
Came through the AT Scholars program. Day one I was assigned a senior analyst as my named mentor — not a "buddy," a real mentor with scheduled time. At 8 months I've already had two formal feedback sessions where my manager walked me through specific examples of what I'm doing well and where I'm growing. My Security+ was funded and I passed 6 weeks after starting. My colleagues who went to other firms have no idea what their career path looks like. I know exactly what Analyst II requires and I'm already tracking against it.
Constructive
The volume of alerts in the first month was higher than expected even with mentorship support. The team was helpful but it's an intense environment to start in. The ramp-up documentation could be more structured in the first two weeks specifically.