Threat Intelligence Analyst, Threat Disruption

SpaceXSI • Bastrop, TX

7h

About The Position

Threat Disruption provides expert threat intelligence and conducts scaled operations against adversaries attacking X. The team investigates and disrupts threats including coordinated networks of bots, compromises of high-visibility accounts, sensitive allegations, suspected foreign-linked influence campaigns, financial fraud, monetization abuse, scam networks, illegal activity, child safety issues, and other X Rules violations.

The team identifies how adversaries evade defenses, abuse product features and core services, and benefit from that abuse. It conducts sweeps to address immediate threats and recommends changes to product, engineering, and policy teams to address systemic vulnerabilities. Where appropriate, Threat Disruption coordinates with law enforcement and other external parties to improve detections and support prosecution of bad actors.

The analyst will investigate sophisticated threat actors, execute large-scale enforcement operations, communicate findings and outcomes, collaborate across teams, and respond to urgent incidents. The role includes flexibility across time zones, including weekends and holidays, as part of an on-call rotation.

Requirements

• Experience with SQL for querying large, complex datasets.
• Flexibility to work across time zones, including weekends and holidays, as part of an on-call rotation.
• Must be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or eligible to obtain required U.S. Department of State authorizations, to conform to U.S. Government export regulations.

Nice To Haves

• Comfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact and scale work.
• Strong respect for users’ freedom of speech and privacy.
• Maturity and discretion when handling sensitive information, with the ability to remain calm and effective during urgent incidents.
• Experience investigating platform manipulation, account compromise, influence operations, or fraud.
• Experience turning investigations into production changes and enforcement outcomes.
• Experience in a 24/7 on-call rotation, including owning urgent incidents and briefing leadership.
• Self-starter mindset with a proven ability to take initiative and drive work forward independently.
• Deep commitment to analytical rigor and operational excellence.
• Exceptional attention to detail.
• Excellent written and verbal communication skills.
• Demonstrated ability to learn quickly and adapt in a fast-paced environment.

Responsibilities

• Identify and counter sophisticated threat actors who are highly motivated to evade detection.
• Conduct first-principles investigations into the specified threat surfaces.
• Design and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accounts.
• Clearly and concisely communicate investigative findings and enforcement outcomes.
• Partner closely with operations, engineering, product, and policy teams across the organization.
• Rapidly and rigorously handle urgent incidents escalated by leadership.
• Participate in an on-call rotation, with flexibility across time zones including weekends and holidays.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed