10a Labs

Principal Cyber Investigator

Washington DC · Principal

No sponsorship$150k-$180kDetected 12 days ago

PythonSQLLLMsCybersecuritySOC OperationsLeadershipCommunicationPublic Speaking

About the role

Please note: this is a one-year position, with the potential for extension.
Oversee day-to-day operations of the embedded team, ensuring exchange labeling and review are completed accurately, efficiently, and in accordance with the client's rubric and review guide
Serve as the senior technical authority on complex and escalated cases, making determinations on real-world harm potential and offensive uplift

Monitor and maintain quality and consistency metrics across the team, identifying gaps and improving review processes
Mentor and develop senior and junior investigators, providing guidance on technically demanding and ambiguous cases
Lead org-level analysis of actor behavior, synthesizing patterns across exchanges to inform detection and mitigation efforts
Query internal data sources via DQL and programmatically, and cross-reference open-source information (OSINT) to support review and validate team output

At least 9+ years of experience in cybersecurity, threat intelligence, Trust & Safety, national security, defense, intelligence, or law enforcement domains
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
Demonstrated experience leading or managing investigative or review teams, including oversight of quality, output, and team development
Familiarity with LLM systems and how AI technology can be misused for cyber operations
Proven ability to serve as a final technical authority on complex cases, with a track record of sound judgment on harm potential and offensive uplift
Strong SQL, Python, and other data language proficiency for querying data and validating investigative output
Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment
Ability to clear an insider-threat background check

Experience working directly with or within frontier AI labs, large technology platforms, or Trust & Safety organizations
Experience with threat intelligence frameworks such as MITRE ATT&CK
Background in dark web monitoring, OSINT, or cross-platform threat analysis
Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish
Active security clearance (Secret or above)
Relevant certifications such as OSCP, GREM, or GCTI

This listing is sourced directly from 10a Labs's careers page and normalized into a canonical job model.