Security Engineer, Investigator - i3E Account Threats & Scams

• Hunt for threats and undetected abuse by leveraging internal data, open source intelligence, and third-party private intelligence
• Investigate complex account security abuses to understand in granular detail how abuse is occurring. Identify and implement appropriate detection or prevention strategies to mitigate harm both in the current case and from similar forward-looking abuse
• Apply subject matter knowledge of adversary tactics, techniques, procedures, and tools to identify and mitigate threats
• Build signatures (e.g. file, network) to detect, hunt, and prevent malware compromise
• Lead technical investigations from start-to-finish, to include effectively communicating actionable results, analytic judgments, and mitigations to different audience types across cross-functional settings
• Identify trends in adversary behavior, and proactive surfacing of risks that may represent previously unidentified or novel vectors for harm. Understand how abuse manifests and clearly explain emerging threats and trends, with an emphasis on security understanding
• Analyze and interpret complex, high volume, and high dimensionality data from varying sources to advance investigations, quantify trends, or support findings
• Lead identifying, prototyping, and teaching novel investigative techniques
• Partner with other cross-functional teams to identify, influence, and implement holistic solutions to surfacing and responding to emerging threats
• Manage multiple projects at once while effectively prioritizing time, based on team priorities
• Use AI to advance investigations and automate the everyday tasks and actions conducted during investigations and team processes

• 5+ years work experience in a cyber security, security investigations, or cyber threat intelligence investigations role
• Adept at building queries to analyze and interpret large datasets to advance investigations, quantify trends or support findings
• Experience investigating and acting on high-impact threats such as account compromise, account automation tooling, account creation abuse, business compromise, scams, phishing attacks or malware analysis
• Proficiency working with Python, PHP, or similar scripting languages
• Experience thinking critically and qualifying assessments with solid communications skills in a cross-functional setting to influence decision makers across all levels of technical background
• Experience identifying effective strategies to prevent or disrupt abuse at scale. Consult on the design of countermeasures to affect those strategies

Experience with advanced use or building of AI tooling (LLMs, embeddings, fine-tuning, RAG, agentic workflows) to augment investigative workflows

• bonus
• equity
• benefits