Principal Cyber Investigator

Job Summary

Leading a dedicated cyber investigations pod, the full-time Principal Cyber Investigator will oversee complex actor attribution, develop investigation standards, and mentor a team while working remotely.

Key responsibilities

• Act as the final technical authority on high-severity cyber misuse escalations and complex actor attribution
• Develop and refine investigative playbooks targeting priority abuse vectors such as ransomware and data exfiltration
• Lead and mentor a team of investigators, ensuring consistent determinations and quality workflows

Required qualifications

• 9+ years of hands-on experience in cyber threat intelligence, digital forensics, or offensive security
• Deep operational familiarity with the MITRE ATT&CK framework and offensive exploit lifecycles
• Proven experience managing or technically directing an investigative unit or SOC escalation tier
• Ability to make reasoned determinations based on ambiguous data and justify rationale in writing
• Demonstrated skill in translating technical threat mechanics into actionable risk assessments