Cyber Investigator

TaskUs Outsourcing Philippines, Inc.; United States; Remote; USD 80,000 - 105,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid time off including vacation, sick

Job summary

TaskUs is seeking a Cyber Investigator for a remote, full‑time role in the United States (Texas preferred). You will join a frontline cyber investigations pod supporting AI safety efforts, reviewing system flags, mapping to MITRE ATT&CK, and providing context through OSINT research.

Responsibilities include triage, labeling, escalations, and clear, evidence‑backed dossiers for senior investigators. Strong DFIR, OSINT, and analytical writing are essential.

Qualifications

• 1–3 years of practical experience in SOC analysis (Tier 1/2), DFIR, threat intel, or technical OSINT investigations.
• Understanding of MITRE ATT&CK matrix and basic network/system internals.
• Analytical documentation: concise English summaries under time pressure.
• Investigative mindset with attention to detail and sound judgment.
• Location: United States with unrestricted work authorization (Texas residency preferred).

Responsibilities

• Queue Review & Triage: investigate automated system flags across priority threat categories.
• Dual‑Use Evaluation: determine if activity is benign research or policy violations.
• Ground‑Truth Labeling: apply precise labels for ML safety filters.
• Adversary Mapping: map prompts and tool usage to MITRE ATT&CK tactics.
• OSINT & Context Enrichment: conduct targeted OSINT research for indicators and infrastructure.
• Escalations & Handoffs: prepare concise case dossiers for high‑severity threats.
• Calibration & Feedback: participate in pod calibration to maintain labeling quality.

Skills

SOC analysis

Digital forensics

Incident response

Threat intelligence

OSINT investigations

Tools

SQL

Python

Bash

Job description

About TaskUs

TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States. It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer

At TaskUs, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee’s career within TaskUs.

Salary Range

Full time: $80,000 - $105,000 per year.

Pay Transparency Statement

The base salary range represents the low and high end of the anticipated salary range for this position across our US locations. The "pay scale" provided is a good faith estimate of the range the employer reasonably expects to pay for the position at the time of hire. Actual salary will be determined based on various factors including, but not limited to, the candidate's qualifications, experience, skills, and specific geographic location.

Benefits

• Medical, dental, and vision insurance
• 401(k) with company match
• Paid time off including vacation, sick leave, and holidays

Application Window

This position is expected to remain open until 11-30-2026. We recommend that interested candidates apply within 7 days of the posting date to ensure consideration.

Job Description

Cyber Investigator. TaskUs partners with pioneering technology companies to build the safety, intelligence, and human-in-the-loop operations powering next-generation artificial intelligence. In this role, you will join a frontline cyber investigations pod supporting one of the world’s foremost frontier AI research and safety companies. Their Safeguards mission is clear: prevent state-of-the-art AI systems from being leveraged by malicious actors to cause harm. While automated detection systems catch abuse at scale, human investigators provide the crucial analytical ground truth.

What you will do

• Queue Review & Triage: Investigate automated system flags across priority threat categories, including:
  • Ransomware and malware authoring / obfuscation
  • Local and remote exploit discovery and weaponization
  • Large-scale data scraping and automated exfiltration
  • Offensive operations, recon, and intrusion staging
• Dual-Use Evaluation: Determine whether observed activity represents benign security research (e.g., CTFs, academic exercises, vulnerability remediation) or actionable policy violations, clearly detailing your rationale.
• Ground‑Truth Labeling: Apply precise, policy‑aligned labels to adjudicated cases to directly test, benchmark, and improve automated machine learning safety filters.
• Adversary Mapping: Map observed user prompts and tool usage to specific MITRE ATT&CK tactics and techniques.
• OSINT & Context Enrichment: Conduct targeted open‑source intelligence (OSINT) research on indicators, tooling, and infrastructure to provide operational context.
• Escalations & Handoffs: Prepare concise, evidence‑backed case dossiers to elevate high‑severity, ambiguous, or novel threats to Senior and Principal Investigators.
• Calibration & Feedback: Actively participate in pod calibration sessions, adopting quality feedback to maintain high labeling consistency across the pod.

What you bring

• 1–3 years of practical experience in SOC analysis (Tier 1/2), digital forensics, incident response (DFIR), threat intelligence, military cyber operations, or technical OSINT investigations.
• Understanding of Attack Lifecycles: Solid working knowledge of the MITRE ATT&CK matrix, basic network/system internals, and how common cyber intrusions and exploit chains progress.
• Analytical Documentation: Proven ability to synthesize complex case details into concise, objective written English summaries under operational timelines.
• Investigative Mindset: Natural curiosity, attention to detail, and sound judgment when evaluating noisy, incomplete, or borderline information.
• Location & Authorization: Based in the United States with unrestricted work authorization (Texas residency preferred).

Nice to have

• Prior background in military service, government intelligence, or federal/local cyber law enforcement.
• Practical exposure to scripting languages (SQL, Python, or Bash) for basic log parsing and telemetry review.
• Foundational cybersecurity certifications (e.g., CompTIA Security+, CySA+, GSEC, GCIH, or CEH).
• An active or previously held U.S. Government Security Clearance (Secret or higher).
• Familiarity with large language models, prompt engineering, or AI red‑team‑ing concepts.

Schedule & Rotation

The role may require rotational shift or weekend/holiday coverage to maintain rapid escalation turnarounds for critical threat events.

Location and Remote

Remote. United States (Texas preferred). Full time.

How We Partner To Protect You

TaskUs will neither solicit money from you during your application process nor require any form of payment in order to proceed with your application. Kindly ensure that you are always in communication with only authorized recruiters of TaskUs.

DEI

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.

EEO

TaskUs is proud to be an equal opportunity workplace and is an affirmative action employer. We celebrate and support diversity; we are committed to creating an inclusive environment for all employees.