SpyCloud

SpyCloud

Investigator - Maryland

Baltimore, Maryland · Full-time

No sponsorship$120k-$180kDetected 28 days ago
TypeScriptPythonRESTLLMsCybersecurityProcurementCustomer SupportUnityResearchLeadershipCommunication

About the role

  • SpyCloud's solutions thwart cyberattacks and protect more than 4 billion accounts worldwide.
  • Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work.
  • SpyCloud collects recaptured breach data, malware-exfiltrated credentials, session cookies, and commercially available information at scale.

Responsibilities

  • Pivot across SpyCloud data using the Investigations Portal, API, and Python-based notebooks to develop leads and close attribution gaps.
  • Integrate large language models and AI tooling into investigative workflows -- building prompts, synthesizing multi-source data, and validating outputs against primary evidence.
  • Develop and document reusable analytical workflows, prompt libraries, and notebook-based processes that improve team throughput and consistency.
  • Training and Customer Support
  • Deliver product training and live capability demonstrations to cleared government personnel, tailoring content to the analytical mission and maturity of each audience.
  • The analyst will conduct original investigations, respond to requests for information, deliver training and capability demonstrations to cleared personnel, and develop AI-assisted analytical workflows using SpyCloud's platform and tooling.

Requirements

  • Active TS/SCI required.
  • Familiarity with adversary TTPs across one or more threat areas: cyber operations, foreign procurement, critical infrastructure, influence operations, or illicit finance.
  • Familiarity with commercial investigative platforms and ability to adapt them to new data sources and mission requirements.
  • Familiarity with adversary analysis frameworks -- including MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model -- as contextual tools for structuring and communicating investigation findings.
  • Working knowledge of structured analytic techniques (SATs) for evaluating evidence, surfacing assumptions, and reducing analytical bias.
  • Up to 25% travel required to support customer sites, training engagements, and community events.

Nice to have

  • Foreign language proficiency in Russian, Mandarin, Farsi, Korean, or Spanish.
  • Experience with cryptocurrency tracing or illicit finance analysis.
  • Prior speaking engagements at intelligence or cybersecurity conferences or working groups.
  • 401(k) with Employer Contribution
  • Five or more years in an all-source, OSINT, or CAI analytical role within a government, defense, or IC-aligned environment.
  • Demonstrated experience supporting RFI pipelines and delivering analytical reports to operational or program stakeholders.
  • Prior experience delivering training or capability demonstrations to cleared analytical audiences.
  • Practical experience incorporating AI and large language models into analytical work, including prompt development and output validation.

Compensation

  • The salary range reflects the expected base compensation for a fully qualified candidate at this level based on experience, qualifications, and market data at the time of posting.
  • $120,000 - $180,000
  • At SpyCloud, we are committed to working alongside individuals who are equally passionate about preventing cybercrime, regardless of their department or role.
  • In addition to our engaging workspace in South Austin, flexible and remote-friendly work options, and competitive salary package, we offer our employees a comprehensive benefits package that includes:
  • 401(k) with Employer Contribution
  • Generous PTO Plan and 16 paid holidays per year

Benefits

  • Health, Vision, and Dental Insurance
  • Health Savings Account (HSA) available with Employer Contribution
  • Employer Paid Life, Short-term, and Long-term Disability Insurance
  • Generous PTO Plan and 16 paid holidays per year
  • Retirement Savings Plan with Employer Contribution
  • Employer Provided Private Health Insurance and Healthcare Cashplan
  • Employer Paid Life Insurance and Income Replacement
  • Generous Holiday Plan and 14 paid holidays per year
  • Guided by our core values in all business decisions, we prioritize unity in our mission and ensure all SpyCloud employees have the support and benefits they need to stay focused on our goals.

Company info

  • SpyCloud is a place for innovative, collaborative, and problem-solvers to thrive. Individually, we're amazing, but together, we're unstoppable. We celebrate diversity and various perspectives and aim to create an inclusive and supportive environment for all. We are proud to be an Equal Employment Opportunity and Affirmative Action employer of choice. All aspects of employment decisions will be based on merit, performance, and business needs. We do not discriminate on the basis of any status protected under federal, state, or local law. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Women, minorities, individuals with disabilities, and protected veterans are encouraged to apply. SpyCloud complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
  • SpyCloud expressly prohibits any form of workplace harassment. Improper interference with the ability of SpyCloud's employees to perform their job duties may result in discipline up to and including discharge. SpyCloud shares the right to work and participates in the E-Verify program in all locations.
  • If you need assistance or accommodation due to a disability, you may contact us.
  • Our Culture:
  • Our mission is to make the internet a safer place by disrupting the criminal underground.
  • Together with our customers and partners, we aim to end criminals' ability to profit from stolen information.
  • We're all driven to disrupt the cybercriminal economy as we keep customer accounts safe from compromise.
  • We support a truly worthy and serious mission, but we have fun doing it together.
  • If you are driven, inventive, and collaborative, you'll fit right in.
  • SpyCloud is a place for innovative, collaborative, and problem-solvers to thrive.
  • Individually, we're amazing, but together, we're unstoppable.
  • We celebrate diversity and various perspectives and aim to create an inclusive and supportive environment for all.
  • We are proud to be an Equal Employment Opportunity and Affirmative Action employer of choice.
  • All aspects of employment decisions will be based on merit, performance, and business needs.
Apply directly at SpyCloud →Create a free account for alerts like thisView SpyCloud immigration profile

This listing is sourced directly from SpyCloud's careers page and normalized into a canonical job model.