Principal Cyber Investigations Lead (Remote)

TaskUs; United States; Remote; USD 140,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Paid time off (vacation, sick, /*holid

Job summary

TaskUs is seeking a Principal Cyber Investigator to lead a dedicated investigations pod supporting frontier AI safety initiatives. You will oversee complex actor attribution, drive high‑severity escalations, and ensure high‑fidelity training data for automated detection models.

Based in the United States with remote work, you will mentor investigators, refine playbooks for ransomware and data exfiltration, and provide executive briefings to client safety leadership.

Qualifications

• 9+ years in cyber threat intelligence, DFIR, offensive security, counter-cyber operations, or OSINT investigations.
• Proven ability to translate complex findings into actionable risk assessments.
• Strong written and verbal communication across policy, legal, and engineering teams.

Responsibilities

• Act as final technical authority on high-severity cyber misuse escalations and complex actor attribution.
• Develop and refine investigative playbooks for priority abuse vectors.
• Lead and mentor a pod of investigators; ensure consistent determinations.
• Deliver precise case labeling to improve client AI detection models.
• Analyze campaigns and actor patterns; provide executive briefings.
• Synthesize cyber findings for client safety leadership and advise on program scaling.
• Cultivate relationships with external threat intelligence communities.

Skills

Cyber threat intelligence

DFIR

Offensive security

OSINT investigations

Threat actor attribution

Tools

MITRE ATT&CK framework

C2 infrastructures

Ransomware/malware staging

Job description

TaskUs is seeking a Principal Cyber Investigator to lead a dedicated investigations pod supporting frontier AI safety initiatives. You will oversee complex actor attribution, drive high‑severity escalations, and ensure high‑fidelity training data for automated detection models.

Based in the United States with remote work, you will mentor investigators, refine playbooks for ransomware and data exfiltration, and provide executive briefings to client safety leadership.