Senior Technical Threat Investigator, Trust and Safety Intel Investigations
Washington D.C., DC, USA · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- You will bridge qualitative threat intelligence with quantitative systems analysis by evaluating detection performance (e.g., precision, recall), contributing to reusable investigative playbooks, and mentoring junior analysts.
Responsibilities
- Identify opportunities to automate investigative tradecraft by designing and building end-to-end SQL and Python scripts and pipelines, Large Language Model (LLM)/agentic workflows, and evaluation frameworks to support proactive threat discovery.
- Collaborate with Engineering, Data Science, and Product teams to deploy network-scoped disruptions, implement high-precision signals, and evaluate and improve detection systems' performance (e.g., precision, recall, and false-positive rates).
Requirements
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Intelligence Studies, a related technical field, or equivalent practical experience.
- 5 years of experience in data analysis, cybersecurity, or technical threat investigations, including identifying trends, generating summary statistics, and drawing insights from quantitative and qualitative datasets.
- 5 years of experience utilizing SQL, Python, or similar scripting/programming languages to query datasets, build data pipelines, and solve engineering and abuse-detection problems.
- 5 years of experience managing projects, including defining project scope, goals, and deliverables in a globally distributed environment.
Nice to have
- Experience combining investigative and engineering skills for link analysis, root-cause analysis, and correlating internal telemetry with OSINT and third-party data.
- Experience partnering with Software Engineering and Data Science teams to engineer detection signals and evaluate performance (precision, recall, trade-offs).
- Experience leading enterprise-wide impact projects, authoring technical requirements (BRDs), and aligning cross-functonal stakeholders.
- Expertise in disrupting trust and safety threats (information operations, fraud, account abuse) using OSINT techniques.
- Effectively communicates complex findings to engineering, product, policy, and leadership audiences.
- Investigate sophisticated emerging actor networks and behaviors across Google's ecosystem by correlating complex internal telemetry, open-source intelligence (OSINT), and third-party intelligence at scale.
- Review graphic, controversial, or objectionable material (including child exploitation, graphic violence, self-injury, severe fraud/scams, and other disturbing content).
Skills
- Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
Compensation
- $159k-$230k
This listing is sourced directly from Google's careers page and normalized into a canonical job model.