10a Labs

Lead and oversee cyber investigation team operations ensuring quality and accuracy in review processes. | Requires 9+ years cybersecurity experience, leadership skills, technical authority on complex cases, and proficiency in data querying languages. | About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely. About The Role Please note: this is a one-year position, with the potential for extension. 10a Labs' Investigations Team is looking for a Principal Cyber Investigator to lead day-to-day operations and oversee quality across a cyber review team. This role requires senior cybersecurity expertise combined with the operational and leadership experience to manage a high-performing team, interface directly with client stakeholders, and set the standard for labeling and review output quality and consistency. In This Role, You Will • Oversee day-to-day operations of the embedded team, ensuring exchange labeling and review are completed accurately, efficiently, and in accordance with the client's rubric and review guide • Serve as the senior technical authority on complex and escalated cases, making determinations on real-world harm potential and offensive uplift • Monitor and maintain quality and consistency metrics across the team, identifying gaps and improving review processes • Interface directly with client stakeholders to communicate findings, surface emerging trends, and align on evolving policy and rubric • Mentor and develop senior and junior investigators, providing guidance on technically demanding and ambiguous cases • Lead org-level analysis of actor behavior, synthesizing patterns across exchanges to inform detection and mitigation efforts • Query internal data sources via DQL and programmatically, and cross-reference open-source information (OSINT) to support review and validate team output Required Qualifications • At least 9+ years of experience in cybersecurity, threat intelligence, Trust & Safety, national security, defense, intelligence, or law enforcement domains • Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience • Demonstrated experience leading or managing investigative or review teams, including oversight of quality, output, and team development • Deep subject-matter expertise in one or more of the following: scaled data extraction, ransomware, local and remote exploits, or offensive security operations • Familiarity with LLM systems and how AI technology can be misused for cyber operations • Proven ability to serve as a final technical authority on complex cases, with a track record of sound judgment on harm potential and offensive uplift • Strong SQL, Python, and other data language proficiency for querying data and validating investigative output • Exceptional written and verbal communication skills, with experience presenting findings to senior stakeholders • Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment • Ability to clear an insider-threat background check Preferred Qualifications • Experience working directly with or within frontier AI labs, large technology platforms, or Trust & Safety organizations • Experience with threat intelligence frameworks such as MITRE ATT&CK • Background in dark web monitoring, OSINT, or cross-platform threat analysis • Experience building or scaling detection and mitigation pipelines • Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish • Active security clearance (Secret or above) • Relevant certifications such as OSCP, GREM, or GCTI Compensation & Benefits • Salary Range: $150K–$180K, depending on experience and location • Work Environment: Fully remote, U.S.-based • Health Benefits: Comprehensive health, dental, and vision coverage • Time Off: Generous PTO and paid holiday schedule • Retirement: 401(k) plan

Review and label AI-generated exchanges for cyber threats, investigate policy violations using data queries and OSINT, and document findings. | 1-3 years cybersecurity experience, knowledge of cyber threats, SQL and Python proficiency, ability to assess harmful technical content, and pass insider-threat background check. | About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely. About The Role 10a Labs' Investigations Team is looking for a Cyber Investigator to support high-volume exchange labeling and investigations across a range of cyber abuse areas. This role requires a solid foundation in cybersecurity and a keen ability to assess whether technical content poses real-world harm. Investigations may involve exposure to harmful or disturbing content, including malicious code, exploit development, and content designed to facilitate cyberattacks. In This Role, You Will • Review and label AI-generated exchanges to assess whether content provides meaningful offensive cyber uplift, distinguishing it from legitimate security research • Investigate potentially policy-violating activity by querying internal data sources using SQL and Python and cross-referencing open-source information (OSINT) • Document and share investigative findings with internal stakeholders • Respond to reactive escalations and on-call leads, including those not caught by existing safety systems Required Qualifications • At least 1–3 years of experience in cybersecurity, Trust & Safety, national security, defense, intelligence, or law enforcement domains • Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience • Foundational knowledge of cyber threat concepts, including one or more of the following: scaled data extraction, ransomware, local and remote exploits, or offensive security operations • Familiarity with LLM systems and how AI technology can be misused for cyber operations • Ability to assess the real-world harm potential of technical content, distinguishing offensive uplift from benign or educational security research • Strong SQL and Python proficiency for querying data and supporting investigations • Ability to rapidly context-switch across domains, modalities, and abuse areas in a fast-paced, ambiguous environment • Ability to clear an insider-threat background check Preferred Qualifications • Experience with threat intelligence frameworks such as MITRE ATT&CK • Background in dark web monitoring, OSINT, or cross-platform threat analysis • Full professional proficiency in Arabic, Chinese, Farsi, Portuguese, Russian, or Spanish • Relevant certifications such as CompTIA Security+, CEH, or OSCP Compensation & Benefits • Salary Range: $80K–$105K, depending on experience and location • Work Environment: Fully remote, U.S.-based • Health Benefits: Comprehensive health, dental, and vision coverage • Time Off: Generous PTO and paid holiday schedule • Retirement: 401(k) plan