Senior Cyber Investigator

TaskUs

. Investigate complex abuse cases and appeals escalated by automated detection systems and Junior Investigators .

Posted 10/26/2026full-timeRemote • Texas • United StatesSenior💰 $120,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Cyber Threat Intelligence, Incident Response, and Digital Investigations, with strong analytical skills in identifying anomalous behavior and articulating technical findings. Proficient in SQL and Python, with a solid understanding of the MITRE ATT&CK matrix and modern malware delivery techniques.

Highest-signal resume keywords

Cyber Threat Intelligence (CTI)Incident Response (DFIR)SQL ProficiencyPython ScriptingMITRE ATT&CK Matrix Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Digital InvestigationsOffensive SecurityLog QueryingData ParsingAnomalous Behavior IdentificationThreat Actor ProfilingRansomware AnalysisMalware AnalysisExploit DiscoveryAutomated Abuse Analysis

Soft Skills

Clear CommunicationMentoringPeer ReviewAnalytical ThinkingFeedback Provision

Tools & Technologies

Investigative ToolingTelemetry AnalysisData Scraping ToolsThreat Intelligence PlatformsCase Management Systems

Certifications & Qualifications

GCFAGCTIGREMOSCPCySA+

Industry Keywords

CybersecurityThreat IntelligenceIncident ResponseMalware Delivery ChainsExploitation TechniquesDark Web TrackingMilitary IntelligenceLaw Enforcement Cyber UnitNational Security OperationsAutomated Exfiltration

Tech Stack

Tools & technologies

PythonSQL

About the role

Key responsibilities & impact

Investigate complex abuse cases and appeals escalated by automated detection systems and Junior Investigators
Analyze ransomware and malware authoring/obfuscation
Investigate local and remote exploit discovery and weaponization
Investigate large-scale data scraping and automated exfiltration
Analyze offensive operations, reconnaissance, and intrusion staging
Pivot across accounts, telemetry, and external threat intelligence to uncover coordinated adversarial campaigns
Profile threat actor tradecraft and tactics, techniques, and procedures (TTPs)
Distinguish legitimate defensive security tasks from active malicious intent
Review Junior Investigators’ casework and provide actionable feedback
Lead calibration sessions to maintain rigorous labeling standards
Use SQL, Python, or investigative tooling to analyze usage telemetry and identify anomalous behavior
Surface emerging abuse trends across large datasets
Author intelligence briefs and enforcement recommendations for the Principal Investigator and client safety leads
Escalate critical threats and zero-day discoveries promptly
Provide rotational escalation coverage, including occasional weekend or holiday support for critical incidents

Requirements

What you’ll need

5+ years of hands-on experience in cyber threat intelligence (CTI), incident response (DFIR), digital investigations, offensive security, or technical OSINT
Strong applied knowledge of the MITRE ATT&CK matrix, modern malware/ransomware delivery chains, and common exploitation techniques
Working proficiency in SQL and Python or similar scripting
Experience querying logs, parsing structured data, and identifying anomalous actor behavior
Proven ability to evaluate ambiguous, incomplete evidence and make high-confidence determinations
Ability to articulate technical findings clearly in written case logs
Experience conducting peer reviews, QA, or mentoring junior analysts in a SOC, CIRT, or trust and safety environment
Based in the United States with unrestricted work authorization
Texas residency preferred
Prior military intelligence, law enforcement cyber unit, or government national security operations experience is nice to have
Direct experience analyzing AI misuse, LLM prompt exploitation/jailbreaks, or automated abuse vectors is nice to have
Technical certifications such as GCFA, GCTI, GREM, OSCP, or CySA+ are nice to have
Active or recent U.S. Government Security Clearance is valued, not required
Experience tracking threat actors across dark web and closed criminal forums is nice to have
Willingness to undergo client-directed insider threat screening and specialized background checks if selected

Benefits

Comp & perks

Competitive industry salaries
Medical, dental, and vision insurance
401(k) with company match
Paid time off including vacation, sick leave, and holidays
Internal mobility and professional growth opportunities
Inclusive environment and community impact
Reasonable accommodations during the hiring process