Senior Cyber Investigator

10a Labs' Investigations Team is looking for a Senior Cyber Investigator to handle escalated exchange review and org-level analysis across a range of cyber abuse areas. This role requires deep cybersecurity subject-matter expertise to assess actor behavior, handle complex cases requiring senior technical judgment, and support labeling quality across the team.

• Review and label AI-generated exchanges, and support label quality across the team to help tune cyber detection performance
• Handle escalated and technically complex cases, applying senior cybersecurity expertise to assess real-world harm potential
• Conduct org-level analysis of actor behavior, identifying patterns across exchanges to inform detection and mitigation efforts
• Query internal data sources using SQL and Python and cross-reference open-source information (OSINT) to support review
• Document and share findings and recommendations with internal stakeholders and client teams
• Support quality and consistency across the team, providing guidance to junior investigators on ambiguous cases

• At least 5+ years of experience in cybersecurity, threat intelligence, Trust & Safety, national security, defense, intelligence, or law enforcement domains
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• Familiarity with LLM systems and how AI technology can be misused for cyber operations, including malware development and social engineering
• Deep subject-matter expertise in one or more of the following: scaled data extraction, ransomware, local and remote exploits, or offensive security operations
• Strong ability to assess the real-world harm potential of technical content, distinguishing genuine offensive uplift from benign or educational security research
• Strong SQL and Python proficiency for querying data and supporting review workflows
• Proven experience conducting org-level threat actor analysis across large datasets
• Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment
• Ability to clear an insider-threat background check

• Experience with threat intelligence frameworks such as MITRE ATT&CK
• Background in dark web monitoring, OSINT, or cross-platform threat analysis
• Experience scaling and automating detection and mitigation processes
• Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish
• Relevant certifications such as OSCP, GREM, or GCTI