Safety Threat Investigator, Safety Investigations

Roblox•San Mateo, CA

4d•$154,970 - $184,570•Onsite

About The Position

The Safety Threat Investigator will join Roblox’s Safety Investigations team and primarily support Core Investigations, the operational backbone for repeatable, high-sensitivity matters that require speed, consistency, evidence discipline, and strong documentation. The investigator independently manages investigations from intake through resolution and produces clear, defensible work product to support high-confidence safety decisions. The role identifies cases requiring deeper attribution, network-centric analysis, cross-platform research, proactive threat hunting, or externally meaningful work product, and partners with or escalates to Specialized Investigations as appropriate. At the CL9 level, the investigator owns a defined safety-risk domain or pod-level workstream, improves investigative processes and standards, serves as a subject-matter expert, and mentors other investigators with limited day-to-day oversight. The work may involve reviewing graphic, controversial, and offensive content in accordance with Roblox’s handling policies. The role may also require participation in an on-call rotation during weekends and holidays.

Requirements

4+ years conducting sensitive investigations involving severe safety, abuse, fraud, security, threat, or other high-risk matters.
Demonstrated ability to independently manage investigations end-to-end, including intake, scoping, evidence development, analysis, findings, recommendations, and follow-through.
Experience using SQL and/or Python, large datasets, and open-source intelligence in an investigative context.
Strong investigative judgment and ability to distinguish facts, inferences, allegations, unknowns, assumptions, and analytical conclusions.
Experience with attribution, account or entity linkage, network analysis, open-source intelligence, external intelligence, or cross-platform research.
Strong written and verbal communication skills, including the ability to produce clear, concise, and defensible work product for investigators, leadership, Legal, Product, Engineering, and external-facing stakeholders.
Ability to turn ambiguous questions into precise investigation plans and drive complex, multi-week or multi-quarter initiatives with minimal oversight.
Systems-oriented thinking and ability to connect individual cases to policy, product, process, detection, legal, reputational, and user-trust considerations.
Experience influencing partners and creating alignment in high-stakes or time-sensitive situations.
Demonstrated mentorship, informal leadership, or subject-matter expertise that helps other investigators grow.
Sound judgment, discretion, curiosity, resilience, and commitment to evidence-based, fair, and proportionate investigations.

Responsibilities

Manage repeatable, high-sensitivity investigations involving serious safety threats, including child exploitation, violent extremism, organized fraud, compromised accounts, coordinated abuse, and other high-risk matters.
Apply structured investigative methods, evidence checklists, common templates, and approved data pulls to produce timely and consistent case outcomes.
Gather, preserve, analyze, and corroborate evidence while maintaining accurate provenance, confidentiality, and auditability.
Define investigative questions, scope, hypotheses, evidence plans, milestones, risk controls, and exit criteria for sensitive or ambiguous matters.
Conduct focused account, entity, and timeline linkage, and identify cases requiring deeper attribution, network mapping, or cross-platform investigation.
Escalate cases to Specialized Investigations when they involve meaningful attribution complexity, broader network risk, external actionability, or a need for deeper synthesis.
Prepare clear case summaries and standardized downstream work product for partners such as Legal, Safety Intelligence, Trust & Safety Operations, Law Enforcement Operations, or NCMEC, as appropriate.
Track recurring patterns, operational pain points, and escalation trends, and translate findings into recommendations for Policy, Product, Engineering, Detection, Legal, and Safety Operations.
Lead or contribute to improvements in investigation playbooks, evidence standards, intake criteria, triage processes, tooling requirements, and quality-review mechanisms.
Represent Safety Investigations with cross-functional stakeholders, explain and defend investigative decisions, navigate disagreement, and maintain alignment on sensitive matters.
Mentor investigators, provide constructive feedback on casework, and raise standards for investigative rigor, documentation, and inclusive collaboration.
Maintain strong case hygiene, document decisions and approvals, and close investigations with clear outcomes, residual-risk ownership, and follow-up actions.
Own a defined safety-risk domain or pod-level workstream at the CL9 level and serve as a subject-matter expert.
Independently manage Core Investigations matters, identify cases warranting escalation, provide practical insights, and own a meaningful process-improvement project or risk domain.