Senior Threat Intelligence Analyst, Safety Intelligence

Written by the T&S Network from Roblox's posting.

Proactive threat intelligence hunting for emerging threats to Roblox's community across child endangerment, violent extremism, extortion, fraud and other harms. Sits on the Safety Intelligence team, where the aim is to find threats before they become incidents and connect actors who move between harm domains.

• Child safety and grooming
• Terrorism and violent extremism
• Fraud and scams

What you'd do

• Lead hypothesis-driven threat hunts for new actors, tactics and evasion techniques before they scale.
• Track actors and networks that span multiple harm types and assess how co-occurring harms reinforce each other.
• Fuse platform data, open-source material and off-platform sources with AI tools to produce finished intel.
• Write threat assessments, trend analyses and briefings with stated confidence levels for audiences from analysts to senior leaders.
• Work with Data Science, Engineering and Moderation Operations to design detection signals and behavioral markers.
• Create reusable playbooks, queries and AI workflows, and coach other analysts on tradecraft and writing.

What it asks for

• Six or more years in threat intel, T&S investigations, cyber, extremism or counter-terrorism analysis, or similar intel work.
• Proven history of hunting threat actors on your own initiative, not just working reported cases.
• Advanced SQL, scripting such as Python, and open-source intelligence methods.
• Produce intelligence products that land with both technical staff and executives.
• Experience working across matrixed teams including Product, Engineering, Policy, Legal and law enforcement.
• Experience on an online platform, social media or gaming T&S or intelligence team (preferred).
• Experience using AI or LLM tools in investigations (preferred).

Worth knowing

• Requires reviewing graphic, controversial and offensive content under Roblox's handling policies.

Terms in this role

OSINT.

Open-source intelligence: investigating with publicly available information, such as social media, public records, archived pages and imagery.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Robloxnorth_east before you apply. If we got something wrong, report this listing.