Principal Cyber Investigator

About 10a Labs

10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.

About the Role

Note: This is a one-year position with potential for extension.

10a Labs' Investigations Team seeks a Principal Cyber Investigator to lead day-to-day operations and oversee quality across a cyber review team. This role requires senior cybersecurity expertise combined with operational and leadership experience to manage a high-performing team, interface directly with client stakeholders, and set standards for labeling and review output quality.

Key Responsibilities

• Oversee day-to-day operations of the embedded team, ensuring exchange labeling and review are completed accurately, efficiently, and in accordance with the client's rubric and review guide
• Serve as senior technical authority on complex and escalated cases, making determinations on real-world harm potential and offensive uplift
• Monitor and maintain quality and consistency metrics across the team, identifying gaps and improving review processes
• Interface directly with client stakeholders to communicate findings, surface emerging trends, and align on evolving policy and rubric
• Mentor and develop senior and junior investigators, providing guidance on technically demanding and ambiguous cases
• Lead org-level analysis of actor behavior, synthesizing patterns across exchanges to inform detection and mitigation efforts
• Query internal data sources via DQL and programmatically, and cross-reference open-source information (OSINT) to support review and validate team output

Required Qualifications

• 9+ years of experience in cybersecurity, threat intelligence, Trust & Safety, national security, defense, intelligence, or law enforcement
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience
• Demonstrated experience leading or managing investigative or review teams, including oversight of quality, output, and team development
• Deep subject-matter expertise in one or more of: scaled data extraction, ransomware, local and remote exploits, or offensive security operations
• Familiarity with LLM systems and how AI technology can be misused for cyber operations
• Proven ability to serve as final technical authority on complex cases with sound judgment on harm potential and offensive uplift
• Strong SQL, Python, and other data language proficiency for querying data and validating investigative output
• Excellent communication skills and ability to translate complex technical findings for non-technical stakeholders