Senior Cyber Investigator

About this role

About TaskUs:
TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech.

The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States.
It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer:
At TaskUs, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee's career within TaskUs. Join our team today and experience firsthand our dedication to supporting People First.

Salary Range:
per year.Pay Transparency Statement:
The base salary range represents the low and high end of the anticipated salary range for this position across our US locations. The "pay scale" provided is a good faith estimate of the range the employer reasonably expects to pay for the position at the time of hire. Actual salary will be determined based on various factors including, but not limited to, the candidate's qualifications, experience, skills, and specific geographic location.

Benefits:
We offer a comprehensive benefits package including medical, dental, and vision insurance; 401(k) with company match; and paid time off including vacation, sick leave, and holidays.

Application Window:
This position is expected to remain open until 11-30-2026 . We recommend that interested candidates apply within 7 days of the posting date to ensure consideration.Job Description:
Senior Cyber Investigator

TaskUs partners with pioneering technology companies to build the safety, intelligence, and human-in-the-loop operations powering next-generation artificial intelligence.

In this role, you will join a specialized cyber investigations pod supporting one of the world’s foremost frontier AI research and safety companies. Their Safeguards mission is clear: prevent state-of-the-art AI systems from being leveraged by malicious actors to cause harm. While automated detection systems catch abuse at scale, seasoned human investigators provide the crucial analytical ground truth.

As a Senior Cyber Investigator, you will take ownership of complex, high-consequence misuse escalations and threat actor profiling. You will evaluate sophisticated cyber abuse, distinguish malicious intent from benign dual-use security research, mentor Junior Investigators, and deliver high-fidelity labels that train automated safety classifiers.

What you will do:

•
Tackle High-Severity Escalations: Investigate complex abuse cases and appeals escalated by automated detection systems and Junior Investigators across priority threat areas:

• Ransomware and malware authoring / obfuscation

• Local and remote exploit discovery and weaponization

• Large-scale data scraping and automated exfiltration

• Offensive operations, recon, and intrusion staging

•
Threat Actor & Campaign Analysis: Pivot across accounts, telemetry, and external threat intelligence to uncover coordinated adversarial campaigns and profile actor tradecraft (TTPs).

•
Evaluate Dual-Use Scenarios: Make sound, defensible determinations separating legitimate defensive security tasks (e.g., authorized auditing, academic research) from active malicious intent.

•
Review & Mentor: Review Junior Investigators’ casework, provide actionable feedback, and lead calibration sessions to maintain rigorous labeling standards across the pod.

•
Data-Driven Threat Hunting: Use SQL, Python, or investigative tooling to analyze usage telemetry, identify anomalous behavior, and surface emerging abuse trends across large datasets.

•
Reporting & Escalations: Author concise intelligence briefs and enforcement recommendations for the Principal Investigator and client safety leads; elevate critical threats and zero-day discoveries promptly.

What you bring:

•
5+ years of hands-on experience in cyber threat intelligence (CTI), incident response (DFIR), digital investigations, offensive security, or technical OSINT.

•
Adversary Tradecraft: Strong applied knowledge of the MITRE ATT&CK matrix, modern malware/ransomware delivery chains, and common exploitation techniques.

•
Investigative Telemetry & Tooling: Working proficiency in SQL and Python (or similar scripting) to query logs, parse structured data, and identify anomalous actor behavior.

•
Defensible Decision-Making: Proven track record of evaluating ambiguous, incomplete evidence, making high-confidence determinations, and articulating technical findings clearly in written case logs.

•
Quality & Mentorship: Experience conducting peer reviews, QA, or mentoring junior analysts in a SOC, CIRT, or trust and safety environment.

•
Location & Authorization: Based in the United States with unrestricted work authorization (Texas residency preferred).

Nice to have:

• Prior background in military intelligence, law enforcement cyber units, or government national security operations.

• Direct experience analyzing…