Threat Intelligence Analyst, Threat Disruption

Written by the T&S Network from SpaceXAI's posting.

Threat intelligence and enforcement work against adversaries attacking X, covering platform manipulation, account compromise, foreign-linked influence, financial fraud and scam networks, and other rules violations including illegal activity and child safety. The team investigates how bad actors evade defenses and abuse features, then runs large sweeps to remove adversary-controlled accounts and recommends systemic fixes to product, engineering, and policy.

• Coordinated manipulation
• Fraud and scams
• Child safety and grooming

What you'd do

• Investigate sophisticated threat actors who are motivated to evade detection across the listed threat surfaces
• Run first-principles investigations into how adversaries circumvent defenses and abuse product features
• Build and run enforcement sweeps that take down accounts in the hundreds of thousands to millions
• Recommend fixes to product, engineering, and policy teams to close systemic vulnerabilities
• Coordinate with law enforcement and external parties to improve detections and support prosecutions
• Handle urgent leadership-escalated incidents and communicate findings and enforcement outcomes clearly

What it asks for

• Strong SQL proficiency for querying large, complex datasets
• Comfort with command line, scripting, and AI tools to scale investigative work
• Work across time zones on call, including weekends and holidays, on an on-call rotation
• Have moved investigation findings into product code changes and enforcement results (preferred)
• Have worked a 24/7 on-call schedule, owning urgent incidents and briefing leadership (preferred)
• U.S. citizen, national, green card holder, refugee, or asylee, or eligible for authorization from the U.S. Department of State under ITAR

Worth knowing

• On-call rotation including weekends and holidays

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on SpaceXAInorth_east before you apply. If we got something wrong, report this listing.