Threat Investigator

10alabs; United Kingdom; On-site; GBP 50,000 - GBP 70,000; Full time

Job summary

An AI security research company is seeking a Threat Investigator for their London-based team to support investigations into malicious activity. The role entails detecting and responding to abuse, requiring expertise in SQL and Python. Candidates should have at least 3 years of investigative experience and be flexible with on-call duties, which may include evenings and weekends. This position offers a critical opportunity to contribute to safety across numerous topics, including child safety and cyber abuse.

Qualifications

• 3+ years of investigative experience in Trust & Safety, National Security, Defense, Intelligence, or Law Enforcement.
• Ability to work London/GMT hours (9am - 5pm GMT).
• On-call availability for urgent escalations.
• Strong SQL and Python skills.

Responsibilities

• Proactively detect and reacquire bad actors on the platform.
• Investigate policy-violating activities using SQL and Python.
• Document and share findings with stakeholders.

Skills

SQL proficiency

Python programming

Investigative experience

Technical investigative skills

Job description

About 10a Labs

10a Labs is an applied research and AI security company trusted by AI unicorns, Fortune 10 companies, and U.S. tech leaders. We combine proprietary technology, deep expertise, and multilingual threat intelligence to detect abuse at scale. We also deliver state-of-the-art red teaming across high-impact security and safety challenges. 10a Labs’ Investigations Team needs additional support to respond to critical safety incidents and conduct investigations across a range of abuse areas, including but not limited to Violence, Hate, Mental Health, CBRNE, Child Safety, Cyber Abuse and more.

Overview

About The Role

As a Threat Investigator, you will be supporting our London-based Europe, Middle East, and Africa (EMEA) Investigations Team. You will be responsible for detecting and/or responding to malicious use and abuse on our platform, investigating activity, drafting reports based on your findings, and making recommendations. This will require technical experience investigating threat actors, harmful behaviors, cyber abuse, and/or other activities; as well as a strong ability to use SQL and Python to query, transform, and understand data. You will also respond to escalations and reactive leads, including those that are not caught by our existing safety systems.

Investigations involve sensitive and distressing content, including sexual, violent, or otherwise-disturbing material.

This role includes serving in an on-call capacity that will involve resolving urgent escalations outside of normal work hours, occasionally including evenings and weekends. The typical on-call rotation is 7 consecutive days per 2 months, though this may shift based on operational needs and candidates should be prepared to remain flexible.

In This Role, You Will

• Proactively detect and reacquire bad actors on our platform.
• Investigate potentially policy-violating activity by querying internal data sources (using SQL and Python) and cross-referencing open source information (OSINT).
• Document and share investigative findings with internal stakeholders.

Requirements

• At least 3+ years of related investigative experience in Trust & Safety, National Security, Defense, Intelligence, or Law Enforcement domains working on related topics; must be willing to work on sensitive subject matter including child safety.
• Europe, Middle East, or Africa-based, with the ability to work London/GMT hours (9am - 5pm GMT).
• Ability to be on-call that will involve resolving urgent escalations outside of normal work hours, including occasional evenings and weekends.
• Strong SQL and Python proficiency and/or additional programming skills.
• Strong and applicable technical investigative skillset with ability to develop and maintain detection pipelines.
• Ability to rapidly context switch across domains, modalities, and abuse areas.
• Excited to work in a fast paced, ambiguous, and purposeful space with high impact across users and beyond.

Desired Qualities (but Not Required)

• Expertise with risk and abuse related to AI platforms.
• EMEA geopolitical expertise and/ or professional experience as an EMEA-based Threat Investigator.
• Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish.
• Have experience scaling and automating detection and mitigation processes.
• Familiarity using language models to scale.
• Familiarity with one of the following topics/areas: violence, extremism, child safety, prompt injection, litigation, scams and fraud abuse, radicalization/persuasion/grooming, hateful activities and groups.