Cyber Investigator

This is a fully remote position, open to applicants in Texas.

📋 Description

• Examine automated system alerts within key threat categories

• Assess cases related to ransomware and malware creation or obfuscation

• Explore local and remote exploits for discovery and weaponization

• Investigate extensive data scraping and automated data exfiltration

• Analyze offensive operations, reconnaissance, and the staging of intrusions

• Evaluate whether activities align with benign security research or constitute actionable policy violations

• Assign accurate, policy-compliant labels to resolved cases

• Align user prompts and tool usage with MITRE ATT&CK tactics and techniques

• Conduct focused OSINT research on indicators, tools, and infrastructures

• Compile succinct, evidence-supported case dossiers for escalation to Senior and Principal Investigators

• Engage in pod calibration meetings and integrate quality feedback

• Assist a frontline cyber investigations team for an AI research and safety organization

• Provide analytical insights to enhance automated machine-learning safety filters

⛳️ Requirements

• 1–3 years of hands-on experience in SOC analysis (Tier 1/2), digital forensics, incident response (DFIR), threat intelligence, military cyber operations, or technical OSINT investigations

• Strong understanding of the MITRE ATT&CK framework

• Basic comprehension of network and system internals

• Knowledge of common cyber intrusions and exploit methodologies

• Capacity to distill complex case information into clear, objective written summaries within operational deadlines

• Curiosity, meticulous attention to detail, and sound judgment when assessing ambiguous, incomplete, or borderline information

• Must be located in the United States

• Must have unrestricted work authorization in the United States

• Texas residency is preferred

• Preferred qualifications: military service, government intelligence, or federal/local cyber law enforcement experience

• Preferred qualifications: practical knowledge of SQL, Python, or Bash for basic log analysis and telemetry review

• Preferred qualifications: foundational cybersecurity certifications such as CompTIA Security+, CySA+, GSEC, GCIH, or CEH

• Preferred qualifications: active or previously held U.S. Government Security Clearance (Secret or higher)

• Preferred qualifications: familiarity with large language models, prompt engineering, or AI red-teaming concepts

• Daily tasks include reviewing flagged prompts, exploit instructions, offensive scripts, and potentially harmful payloads

• May necessitate rotational shifts or weekend/holiday availability

• Selected applicants may undergo client-directed insider threat assessments and specific background checks

🏝️ Benefits

• Competitive salaries within the industry

• Medical, dental, and vision coverage

• 401(k) plan with company matching

• Paid leave including vacation, sick days, and holidays

• Wellness support programs

• Opportunities for professional development and internal movement

• An inclusive work environment

• Reasonable accommodations throughout the hiring process