Senior Cyber Investigator

This is a fully remote position, open to applicants in Texas.

📋 Description

• Investigate intricate abuse cases and appeals that have been escalated by automated detection systems and Junior Investigators.

• Analyze the authoring and obfuscation techniques of ransomware and malware.

• Conduct investigations into exploit discovery and weaponization, both locally and remotely.

• Examine large-scale data scraping activities and automated data exfiltration.

• Analyze offensive operations, reconnaissance efforts, and the staging of intrusions.

• Leverage accounts, telemetry, and external threat intelligence to uncover coordinated adversarial activities.

• Profile the tradecraft of threat actors, including their tactics, techniques, and procedures (TTPs).

• Differentiate between legitimate defensive security measures and active malicious intentions.

• Review the casework of Junior Investigators and provide actionable insights.

• Lead calibration sessions to uphold strict labeling standards.

• Utilize SQL, Python, or other investigative tools to analyze usage telemetry and identify unusual behavior.

• Highlight emerging abuse trends from extensive datasets.

• Write intelligence briefs and enforcement suggestions for the Principal Investigator and client safety leads.

• Promptly escalate critical threats and zero-day findings.

• Provide rotational escalation support, which may include occasional work on weekends or holidays for critical incidents.

⛳️ Requirements

• A minimum of 5 years of hands-on experience in cyber threat intelligence (CTI), incident response (DFIR), digital investigations, offensive security, or technical OSINT.

• Strong applied knowledge of the MITRE ATT&CK matrix, contemporary malware/ransomware delivery methods, and common exploitation techniques.

• Proficiency in SQL and Python or similar scripting languages.

• Experience in querying logs, parsing structured data, and detecting anomalous actor behavior.

• Demonstrated ability to assess vague and incomplete evidence, making high-confidence decisions.

• Capability to clearly articulate technical findings in written case logs.

• Experience in conducting peer reviews, quality assurance, or mentoring junior analysts in a SOC, CIRT, or trust and safety environment.

• Must be based in the United States with unrestricted work authorization.

• Preference for Texas residency.

• Previous experience in military intelligence, law enforcement cyber units, or government national security operations is a plus.

• Direct experience in analyzing AI misuse, LLM prompt exploitation/jailbreaks, or automated abuse vectors is advantageous.

• Technical certifications such as GCFA, GCTI, GREM, OSCP, or CySA+ are beneficial.

• An active or recent U.S. Government Security Clearance is valued but not mandatory.

• Experience in tracking threat actors across the dark web and closed criminal forums is a bonus.

• Willingness to undergo client-directed insider threat screening and specialized background checks if selected.

🏝️ Benefits

• Competitive salaries within the industry.

• Comprehensive medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Paid time off, including vacation, sick leave, and holidays.

• Opportunities for internal mobility and professional development.

• An inclusive workplace and opportunities for community impact.

• Reasonable accommodations provided during the hiring process.