Senior Cyber Investigator

10a Labs provides safety and threat-intelligence services for AI systems and cybersecurity teams. The Senior Cyber Investigator handles escalated exchange reviews, analyzes threat actor behavior, supports cyber detection and mitigation efforts, and guides junior investigators.

Responsibilities:

• Review and label AI-generated exchanges, and support label quality across the team to help tune cyber detection performance
• Handle escalated and technically complex cases, applying senior cybersecurity expertise to assess real-world harm potential
• Conduct org-level analysis of actor behavior, identifying patterns across exchanges to inform detection and mitigation efforts
• Query internal data sources using SQL and Python and cross-reference open-source information (OSINT) to support review
• Document and share findings and recommendations with internal stakeholders and client teams
• Support quality and consistency across the team, providing guidance to junior investigators on ambiguous cases

Requirements:

• At least 5+ years of experience in cybersecurity, threat intelligence, Trust & Safety, national security, defense, intelligence, or law enforcement domains
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• Familiarity with LLM systems and how AI technology can be misused for cyber operations, including malware development and social engineering
• Deep subject-matter expertise in one or more of the following: scaled data extraction, ransomware, local and remote exploits, or offensive security operations
• Strong ability to assess the real-world harm potential of technical content, distinguishing genuine offensive uplift from benign or educational security research
• Strong SQL and Python proficiency for querying data and supporting review workflows
• Proven experience conducting org-level threat actor analysis across large datasets
• Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment
• Experience with threat intelligence frameworks such as MITRE ATT&CK
• Background in dark web monitoring, OSINT, or cross-platform threat analysis
• Experience scaling and automating detection and mitigation processes
• Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish
• Relevant certifications such as OSCP, GREM, or GCTI