Threat Investigator

Discord•San Francisco, CA

12d

About The Position

Discord's Violent Actors Team, part of the broader Threat Operations org within Trust & Safety, focuses on identifying and disrupting violent and extremist networks and threat actors. As a Threat Investigator, you'll lead investigations into these communities, identify novel detection mechanisms, and develop enforcement strategies to stay ahead of ongoing and emerging threats. A typical day might include conducting deep-dive network investigations, compiling high-value signals to fuel proactive detection, or collaborating with internal and external partners on incident response. This role requires the ability to flex across a range of harm portfolios as team priorities evolve.

Requirements

5+ years of experience in threat intelligence, investigations, or incident management, with a track record of leading complex, multi-stakeholder cases independently
Deep expertise in at least one extremist or violent threat actor ecosystem, with the analytical flexibility to develop proficiency across new harm verticals as priorities shift
Demonstrated ability to define scope, propose solutions, and drive projects to completion in ambiguous, high-change environments with minimal oversight
Proficiency with data analysis tools, case management systems, and machine learning tooling to support network investigations and detection work
Strong written and verbal communication skills, including the ability to translate complex, sensitive topics for non-expert audiences, and experience producing cross-functional product requests, intelligence products, and engaging with law enforcement, government, or external partners
Collaborative approach to cross-functional work, with the ability to build consensus and coordinate across teams and time zones

Nice To Haves

Additional language proficiency, particularly in languages relevant to high-harm threat actor communities
Experience translating investigative findings into clear, actionable insights for non-expert or executive audiences

Responsibilities

Leading complex investigations into violent extremist and threat actor networks, developing and iterating on detection and disruption strategies across your investigative portfolio
Executing on roadmap projects, including cross-functional coordination with policy, engineering, and ML/AI teams, documentation of behavioral trends, and identification of scalable mitigation strategies
Leveraging investigative signals and subject matter expertise to inform threat prioritization decisions
Identifying emergence of novel harm behaviors, and gaps in Discord's detection, policy, and enforcement capabilities
Partnering with team program managers to develop and prioritize improvements to operational readiness
Serving as a subject matter resource for teammates, leadership, and cross-functional partners