Threat Intelligence Analyst, Threat Disruption

Xai
Bastrop, TX
On-site

Who this role is best for

A natural match if you have experience in threat intelligence or enforcement operations.

Best fit for

  • Candidates with experience in threat intelligence and account compromise investigations
    — “Experience investigating platform manipulation, account compromise, influence operations, or fraud
  • Candidates who can lead and deliver under pressure in a flat, hands-on organization
    — “Leadership is given to those who show initiative and consistently deliver excellence
  • Candidates with a background in SQL and scripting for large-scale data operations
    — “Strong proficiency in SQL for querying large, complex datasets

Things to consider

  • Urgent incident handling is expected, with potential for weekend and holiday work
    — “Flexibility to work across time zones, including weekends and holidays
  • Candidates must meet specific U.S. export regulations and citizenship requirements
    — “To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national

How to stand out

  • Highlight your experience in designing and executing large-scale enforcement operations
    — “Design and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accounts
  • Emphasize your ability to communicate findings clearly and concisely
    — “Clearly and concisely communicate investigative findings and enforcement outcomes
  • Showcase your initiative and ability to drive work forward independently
    — “Self-starter mindset with a proven ability to take initiative and drive work forward independently
  • Demonstrate your comfort with command line tools and scripting for operational efficiency
    — “Comfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · TeamLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • conduct large-scale enforcement operations
Typical background
Threat intelligence experience

Skills & requirements

Required

Threat IntelligenceInvestigationLarge-scale Enforcement Operations

Preferred

Hands-on Experience In Developing Technical Procedures

Stack & domain

Threat IntelligenceLarge-scale Enforcement OperationsSql QueryingCommand Line OperationsCybersecurityFraud Detection

About the role

Original posting from Xai via Greenhouse

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

ABOUT THE ROLE:

Threat Disruption provides expert threat intelligence and conducts scaled operations against the adversaries attacking X. We investigate and disrupt threats across the following areas:

Platform manipulation, including coordinated networks of bots attempting to pollute the information space

Compromises of accounts owned by high-visibility individuals and organizations

Sensitive allegations carrying reputational, legal, or geopolitical weight, including suspected foreign-linked influence campaigns

Financial fraud, monetization abuse, and scam networks operating on and off X

Other X Rules violations, including illegal activity and child safety

We identify how adversaries circumvent our defenses, abuse product features and core services, and benefit from the abuse. Based on these investigations, we conduct sweeps to disrupt immediate threats and provide recommendations to product, engineering, and policy teams to squash systemic vulnerabilities.

Where appropriate, Threat Disruption also coordinates with law enforcement and other external parties to enhance detections and support prosecution of bad actors.

Come help us defend the global town square.

RESPONSIBILITIES:

Identify and counter sophisticated threat actors who are highly motivated to evade detection

Conduct first-principles investigations into the threat surfaces outlined above

Design and execute large-scale enforcement operations that remove hundreds of thousands to millions of adversary-controlled accounts

Clearly and concisely communicate investigative findings and enforcement outcomes

Partner closely with operations, engineering, product, and policy teams across the organization

Rapidly and rigorously handle urgent incidents escalated by leadership

BASIC QUALIFICATIONS:

Self-starter mindset with a proven ability to take initiative and drive work forward independently

Deep commitment to analytical rigor and operational excellence

Exceptional attention to detail

Excellent written and verbal communication skills

Demonstrated ability to learn quickly and adapt in a fast-paced environment

Maturity and discretion when handling sensitive information, with the ability to remain calm and effective during urgent incidents

Strong proficiency in SQL for querying large, complex datasets

Comfort operating in the command line, writing scripts, and leveraging AI tools to amplify impact and scale work

Flexibility to work across time zones, including weekends and holidays, as part of an on-call rotation

Strong respect for users’ freedom of speech and privacy

PREFERRED SKILLS AND EXPERIENCE:

Experience investigating platform manipulation, account compromise, influence operations, or fraud

Experience turning investigations into production changes and enforcement outcomes

Experience in a 24/7 on-call rotation, including owning urgent incidents and briefing leadership

COMPENSATION AND BENEFITS:

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Source: Xai careers (Greenhouse)

Similar roles