Principal Cyber Investigator
Core
Lead a dedicated cyber investigations pod to prevent state-of-the-art AI systems from being leveraged by malicious actors, serving as the final technical authority on high-severity cyber misuse escalations and providing high-fidelity training data for automated detection models.
Role type
Principal Cyber Investigator (Senior IC with team leadership)
Builds
Human-in-the-loop safety operations for frontier AI research and safety companies
Domain
Cybersecurity, Threat Intelligence, AI Safety
Deliverable
production ML models
Required skills
Cyber threat intelligence (CTI), Digital forensics and incident response (DFIR), Offensive security, Counter-cyber operations, OSINT investigations, MITRE ATT&CK framework, Adversary tradecraft, Team leadership, Technical adjudication, Campaign analysis
Preferred skills
Military intelligence background, AI/LLM misuse assessment, U.S. Government Security Clearance, Industry certifications (GCFA, GCTI, GREM, OSCP, CISSP)
Technologies
MITRE ATT&CK, C2 infrastructures, Ransomware/Malware staging tools
Responsibilities
Act as final technical authority on ambiguous high-severity cyber misuse escalations and customer appeals; Develop and refine investigative playbooks targeting ransomware, data exfiltration, and offensive cyber operations; Lead and mentor a pod of Senior and Junior Investigators; Deliver precise case labeling to benchmark and improve client automated detection models; Uncover coordinated adversarial campaigns and emerging threat actor tactics; Synthesize complex cyber findings into actionable briefings for client safety leadership
Seniority
Principal, hands-on IC with team leadership
