[Hiring] Principal Cyber Investigator @TaskUs

Role Description

TaskUs partners with pioneering technology companies to build the safety, intelligence, and human-in-the-loop operations powering next-generation artificial intelligence. In this role, you will lead a dedicated cyber investigations pod supporting one of the world’s foremost frontier AI research and safety companies. Their Safeguards mission is clear: prevent state-of-the-art AI systems from being leveraged by malicious actors to cause harm. While automated systems catch misuse at scale, human investigative expertise serves as the ultimate ground truth.

As the Principal Cyber Investigator, you will serve as the pod’s senior technical authority and operational lead. You will oversee a tiered team of investigators, direct complex actor and campaign-level attribution, recommend high-consequence enforcement actions, and ensure case labels provide high-fidelity training data for automated detection models.

What you will do:

• Technical Escalations & Adjudication: Act as the final technical authority on the pod for ambiguous, high-severity cyber misuse escalations, customer appeals, and complex actor attribution.
• Investigation Standards: Develop and refine investigative playbooks targeting priority abuse vectors: ransomware, large-scale data exfiltration, local/remote exploits, and offensive cyber operations.
• Team Leadership & Calibration: Lead and mentor a pod of Senior and Junior Investigators; drive regular calibration routines and quality workflows to maintain defensible, consistent determinations across the team.
• Model Feedback & Data Labeling: Deliver precise, highly calibrated case labeling to benchmark, test, and directly improve the accuracy of client automated detection models.
• Campaign & Pattern Analysis: Pivot off isolated telemetry to uncover coordinated adversarial campaigns and emerging threat actor tactics.
• Executive Briefings: Synthesize complex cyber findings into concise, actionable briefings for client safety leadership; advise on emerging adversary tradecraft and program scaling needs.
• External Threat Intelligence: Cultivate working relationships with vetted external threat intelligence and information-sharing communities where client protocols permit.

Qualifications

• 9+ years of hands-on experience in cyber threat intelligence (CTI), digital forensics and incident response (DFIR), offensive security, counter-cyber operations, or specialized OSINT investigations.
• Deep operational familiarity with the MITRE ATT&CK framework, offensive exploit lifecycles, C2 infrastructures, and ransomware/malware staging.
• Proven experience managing, mentoring, or technically directing an investigative unit, threat pod, or SOC escalation tier.
• Proven ability to make decisive, reasoned determinations based on partial, noisy, or ambiguous data, with the ability to clearly justify your rationale in writing.
• Demonstrated skill translating technical threat mechanics into actionable risk assessments for policy, legal, and engineering counterparts.

Requirements

• Based in the United States with unrestricted work authorization.

Nice to have:

• Professional background in military intelligence, federal law enforcement, or national security cyber units tracking advanced persistent threats (APTs) or organized cybercrime.
• Direct experience assessing or red-teaming AI/LLM misuse, jailbreaking techniques, or autonomous agent vulnerabilities.
• Active or recent U.S. Government Security Clearance (Secret / Top Secret).
• Industry certifications reflecting deep technical or investigative capability (e.g., GCFA, GCTI, GREM, OSCP, CISSP).

Benefits

• Comprehensive benefits package including medical, dental, and vision insurance.
• 401(k) with company match.
• Paid time off including vacation, sick leave, and holidays.

Application Window

This position is expected to remain open until 11-30-2026. We recommend that interested candidates apply within 7 days of the posting date to ensure consideration.

Salary Range

$140,000 - $215,000 per year.

How We Partner To Protect You

TaskUs will neither solicit money from you during your application process nor require any form of payment in order to proceed with your application. Kindly ensure that you are always in communication with only authorized recruiters of TaskUs.

DEI

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.

EEO

TaskUs is proud to be an equal opportunity workplace and is an affirmative action employer. We celebrate and support diversity; we are committed to creating an inclusive environment for all employees. TaskUs people first culture thrives on it for the benefit of our employees, our clients, our services, and our community.

We invite you to explore all TaskUs career opportunities and apply through the provided URL https://www.taskus.com/careers/ .