Threat Investigator US
Listed by employer · Checked
Older posting · still listed ·
- Work arrangement
- remote
- Employment
- Not stated
- Stated compensation
- Not specified
Does the location policy fit?
Choose where you would work from. We’ll compare it with the posting’s stated requirements.
Not enough information in this posting — confirm with the employer
Checked for applicants in Nepal; employer sponsorship is not needed. Based on the source posting · not a hiring or work-authorization guarantee.
The posting does not specify whether applicants from your country are accepted.
Why this result?
1 supporting signals
- The role is described as remote; geographic restrictions still apply.
3 still unclear
- The posting does not specify whether applicants from your country are accepted.
- Visa sponsorship is not specified.
- Existing work authorization is required. Country of residence does not establish your authorization.
The employer’s posting date is more than 60 days ago. It remained listed at our last successful check; it may be a long-running or evergreen opening. Confirm availability on the original posting before applying.
Browse jobs posted in the past 60 days →This checks the posting’s stated requirements, not your legal right to work. Confirm details with the employer.
Requirements
3 with evidence6 unclear or unstated- Remote policy
- remote
“Provider workplace type: remote”
From employer posting metadata - Minimum experience (years)
- 3
“At least 3+ years of related investigative experience in Trust & Safety, National Security, Defense, Intelligence, or Law Enforcement domains working on related topics;”
See matched passage in original description ↓ - Work authorization
- This role requires the ability to work Pacific Time (PT) hours and have valid work authorization in the United States.
“This role requires the ability to work Pacific Time (PT) hours and have valid work authorization in the United States.”
See matched passage in original description ↓
8 fields not stated in this posting
- Employer sponsorship
- Not specified
- Geographic scope
- Not specified
- Degree requirement
- Not specified
- Security clearance
- Not mentioned
- Timezone / hours
- Not specified
- Citizenship requirement
- Not mentioned
- Employment type
- Not specified
- Compensation
- Not specified
These details were not stated in the tracked posting. Confirm with the employer.
Original job description
Reading view uses normalized posting text so exact evidence excerpts can be highlighted.
Show less description
Original formatting and links
About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.
10a Labs’ Investigations Team is seeking additional support to respond to critical safety incidents and conduct investigations across a range of abuse areas, including but not limited to violence, hate, mental health, CBRNE, child safety, and cyber abuse.
This role requires the ability to work Pacific Time (PT) hours and have valid work authorization in the United States.
About the Role:
As a Threat Investigator, you will be supporting our Investigations Team and responsible for detecting and/or responding to malicious uses and abuse, investigating the activity, drafting reports based on your findings, and making recommendations. This will require technical experience investigating threat actors, harmful behaviors, and/or other activities; as well as a strong ability to use SQL and Python to query, transform, and understand data. You will also respond to escalations and reactive leads, including those that are not caught by our existing safety systems.
Investigations involve sensitive and distressing content, including sexual, violent, or otherwise-disturbing material.
This role includes serving in an on-call capacity that will involve resolving urgent escalations outside of normal work hours, occasionally including evenings and weekends. The typical on-call rotation is 7 consecutive days per 2 months, though this may shift based on operational needs and candidates should be prepared to remain flexible.
This is a remote, full-time position.
In this role, you will:
- Proactively detect and reacquire bad actors on our platform.
- Investigate potentially policy-violating activity by querying internal data sources (using SQL and Python) and cross-referencing open source information (OSINT).
- Document and share investigative findings with internal stakeholders.
Requirements:
- At least 3+ years of related investigative experience in Trust & Safety, National Security, Defense, Intelligence, or Law Enforcement domains working on related topics; must be willing to work on sensitive subject matter including child safety.
- U.S.-based, with the ability to work West Coast hours (9am - 5pm PT).
- Ability to be on-call that will involve resolving urgent escalations outside of normal work hours, including occasional evenings and weekends.
- Strong SQL and Python proficiency and/or additional programming skills.
- Strong and applicable technical investigative skillset with ability to develop and maintain detection pipelines.
- Ability to rapidly context switch across domains, modalities, and abuse areas.
- Excited to work in a fast paced, ambiguous, and purposeful space with high impact across users and beyond.
Preferred Qualities (but not required):
- Expertise with risk and abuse related to AI platforms.
- Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish.
- Have experience scaling and automating detection and mitigation processes.
- Familiarity using language models to scale.
- Familiarity with one of the following topics/areas: violence, extremism,, child safety, digital mental health, scams and fraud abuse, radicalization/persuasion/grooming, hateful activities and groups.
No similar roles found yet — browse all 10a Labs jobs.
Explore stated remote geography
These collections reflect applicant location statements, not authorization or citizenship.