Cyber Investigator

TaskUs

21h • $80,000 - $105,000 • Remote

About The Position

TaskUs partners with technology companies to build safety, intelligence, and human-in-the-loop operations for next-generation artificial intelligence. The Cyber Investigator joins a frontline investigations pod supporting an AI research and safety company. The role helps prevent malicious actors from leveraging advanced AI systems to cause harm by providing analytical ground truth for automated detection systems.

The investigator conducts daily triage and analysis of flagged telemetry, evaluates high-risk cyber prompts, distinguishes legitimate defensive security research from malicious intent, applies structured labels to support automated safety classifiers, and prepares documented escalations for Senior and Principal Investigators. The work includes reviewing prompts, exploit instructions, offensive scripts, and potentially malicious payloads. The role is remote in the United States, with Texas residency preferred, and may involve rotational shifts or weekend and holiday coverage. Selected candidates may undergo client-directed insider threat screening and specialized background checks.

Requirements

• 1–3 years of practical experience in SOC analysis (Tier 1/2), digital forensics, incident response (DFIR), threat intelligence, military cyber operations, or technical OSINT investigations.
• Solid working knowledge of the MITRE ATT&CK matrix, basic network and system internals, and common cyber intrusion and exploit-chain progression.
• Ability to synthesize complex case details into concise, objective written English summaries under operational timelines.
• Curiosity, attention to detail, and sound judgment when evaluating noisy, incomplete, or borderline information.
• Based in the United States with unrestricted work authorization.

Nice To Haves

• Texas residency preferred.
• Background in military service, government intelligence, or federal or local cyber law enforcement.
• Practical exposure to SQL, Python, or Bash for basic log parsing and telemetry review.
• Foundational cybersecurity certification such as CompTIA Security+, CySA+, GSEC, GCIH, or CEH.
• Active or previously held U.S. Government Security Clearance at Secret level or higher.
• Familiarity with large language models, prompt engineering, or AI red-teaming concepts.

Responsibilities

• Investigate automated system flags across priority threat categories, including ransomware and malware authoring or obfuscation, exploit discovery and weaponization, large-scale data scraping and automated exfiltration, and offensive operations, reconnaissance, and intrusion staging.
• Determine whether observed activity is benign security research, such as CTFs, academic exercises, or vulnerability remediation, or an actionable policy violation, and clearly document the rationale.
• Apply precise, policy-aligned labels to adjudicated cases to test, benchmark, and improve automated machine-learning safety filters.
• Map user prompts and tool usage to MITRE ATT&CK tactics and techniques.
• Conduct targeted open-source intelligence research on indicators, tools, and infrastructure to provide operational context.
• Prepare concise, evidence-backed case dossiers and escalate high-severity, ambiguous, or novel threats to Senior and Principal Investigators.
• Participate in pod calibration sessions and incorporate quality feedback to maintain consistent labeling.

Benefits

• Medical, dental, and vision insurance.
• 401(k) with company match.
• Paid time off, including vacation, sick leave, and holidays.
• Competitive industry salaries and comprehensive benefits packages.
• Employee well-being resources and opportunities for internal mobility and professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed