Threat Intelligence Analyst, Threat Disruption
Core
Conduct large-scale enforcement operations to identify, investigate, and disrupt sophisticated threat actors manipulating platforms, compromising accounts, and running fraud/influence campaigns on X.
Role type
Senior IC threat intelligence analyst (threat disruption)
Builds
Production enforcement outcomes, account removals, and systemic vulnerability fixes for X's platform
Domain
Cybersecurity, platform integrity, threat intelligence, fraud detection
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
SQL, command line scripting, AI tool usage, first-principles investigation, large-scale operation design, rapid incident response
Preferred skills
Experience with platform manipulation/influence operations, experience turning investigations into production changes, 24/7 on-call ownership
Technologies
SQL, command line, AI tools
Responsibilities
Identify and counter sophisticated threat actors; Conduct first-principles investigations into threat surfaces; Design and execute large-scale enforcement operations; Communicate investigative findings and enforcement outcomes; Partner with operations, engineering, product, and policy teams; Handle urgent incidents escalated by leadership
Seniority
Senior, hands-on IC