Cyber Investigator

About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.

About the role: 

Please note: this is a one-year position, with the potential for extension.

10a Labs' Investigations Team is looking for a Cyber Investigator to support high-volume exchange labeling and investigations across a range of cyber abuse areas. This role requires a solid foundation in cybersecurity and a keen ability to assess whether technical content poses real-world harm. 

Investigations may involve exposure to harmful or disturbing content, including malicious code, exploit development, and content designed to facilitate cyberattacks.

In this role, you will:

• Review and label AI-generated exchanges to assess whether content provides meaningful offensive cyber uplift, distinguishing it from legitimate security research
• Investigate potentially policy-violating activity by querying internal data sources using SQL and Python and cross-referencing open-source information (OSINT)
• Document and share investigative findings with internal stakeholders
• Respond to reactive escalations and on-call leads, including those not caught by existing safety systems

Required Qualifications:

• At least 1–3 years of experience in cybersecurity, Trust & Safety, national security, defense, intelligence, or law enforcement domains 
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience 
• Foundational knowledge of cyber threat concepts, including one or more of the following: scaled data extraction, ransomware, local and remote exploits, or offensive security operations
• Familiarity with LLM systems and how AI technology can be misused for cyber operations
• Ability to assess the real-world harm potential of technical content, distinguishing offensive uplift from benign or educational security research
• Strong SQL and Python proficiency for querying data and supporting investigations
• Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment
• Ability to clear an insider-threat background check

Preferred Qualifications: 

• Experience with threat intelligence frameworks such as MITRE ATT&CK
• Background in dark web monitoring, OSINT, or cross-platform threat analysis
• Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish
• Relevant certifications such as CompTIA Security+, CEH, or OSCP 

Compensation & Benefits:

• Salary Range: $80K–$105K, depending on experience and location
• Work Environment: Fully remote, U.S.-based
• Health Benefits: Comprehensive health, dental, and vision coverage
• Time Off: Generous PTO and paid holiday schedule
• Retirement: 401(k) plan